96 matches found
Design/Logic Flaw
code-server is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3807
CVE-2021-3807 affects ansi-regex, enabling Regular Expression Denial of Service (ReDoS) with high impact (CVSS v3.1 base 7.5). Connected docs confirm DoS in Jira Data Center/Server and Jira Service Management, with fixed versions including Jira DC/Server 10.3.16+ and 11.2.1+. Remediation is to up...
CVE-2021-3803 Inefficient Regular Expression Complexity in fb55/nth-check
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3807
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3795
semver-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3795
semver-regex is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
prism is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3777
nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3777
CVE-2021-3777: nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity (ReDoS). IBM X-Force lists CVSS v3.1 base score 7.5 (HIGH) with Network attack vector, no user interaction, and Availability impact. No remediation details are provided in the supplied documents.
Inefficient Regular Expression Complexity in daaku/nodejs-tmpl
✍️ Description It allows cause a denial of service when formatting crafted string. 🕵️♂️ Proof of Concept // PoC.js var tmpl = require"tmpl" forvar i = 1; i = 50000; i++ var time = Date.now; var attackstr = ""+"".repeati10000+"answer"; tmplattackstr, answer: 42 var timecost = Date.now - time;...
axios Inefficient Regular Expression Complexity vulnerability
axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
CVE-2021-3749 affects the Axios package used by IBM Cloud Pak System and Node.js environments. It is a Denial of Service vulnerability via a regular-expression DoS in the trim function, exploitable by crafted input to cause high CPU usage. Remediation is to upgrade to fixed software; IBM Cloud Pa...