68 matches found
PT-2022-6259 · Cookiejar +1 · Cookiejar +1
Name of the Vulnerable Software and Affected Versions: cookiejar versions prior to 2.1.4 Description: The issue is related to the Cookie.parse function in the cookiejar package, which uses an insecure regular expression. This can lead to a Regular Expression Denial of Service ReDoS if untrusted...
CBioportal security vulnerabilities
CbioPortal is used to provide visualization, analysis, and download of large-scale cancer genomics datasets. a denial-of-service vulnerability exists in CbioPortal in versions 3.6.21 and earlier, which stems from the insecure handling of regular expressions in /ProteinArraySignificanceTest.json,...
Regular Expression Denial Of Service (ReDoS)
normalize-url is vulnerable to regular expression denial of service. The usage of an insecure regex allows an attacker to cause a denial of service condition via a malicious URL string...
Regular Expression Denial Of Service (ReDoS)
browserslist is vulnerable to regular expression denial of service. Usage of an insecure regex allows an attacker to cause a denial of service condition via a malicious string...
Regular Expression Denial Of Service (DoS)
pillow is vulnerable to regular expression denial of service. Usage of an insecure regex allows an attacker to cause excessive CPU consumption when parsing a malicious PDF file...
Regular Expression Denial-of-Service (ReDoS)
pillow is vulnerable to regular expression denial of service. Usage of an insecure regex allows an attacker to cause excessive CPU consumption when parsing a malicious PDF file...
Regular Expression Denial Of Service (ReDoS)
@progfay/scrapbox-parser is vulnerable to Regular Expression Denial Of Service. An insecure regex allows an attacker to crash the application via a malicious URL...
Regular Expression Denial Of Service (ReDoS)
marked is vulnerable to regular expression denial of service. The usage of an insecure regex allows an attacker to crash the application via malicious string...