Lucene search
+L

487 matches found

OSV
OSV
•added 2022/10/17 8:15 p.m.•18 views

AZL-44946 CVE-2022-3517 affecting package js-jquery 3.5.0-4

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS6.8AI score0.01825EPSS
SaveExploits0References1
OSV
OSV
•added 2022/10/17 8:15 p.m.•9 views

DEBIAN-CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS6.9AI score0.01825EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/17 8:15 p.m.•42 views

Denial of service

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

5CVSS7.6AI score0.01825EPSS
SaveExploits0References5Affected Software3
UbuntuCve
UbuntuCve
•added 2022/10/17 8:15 p.m.•71 views

CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS6.8AI score0.01825EPSS
SaveExploits0References4
OSV
OSV
•added 2022/10/17 8:15 p.m.•12 views

UBUNTU-CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS6.8AI score0.01825EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2022/10/17 12:00 a.m.•76 views

CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

8AI score0.01825EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2022/10/17 12:00 a.m.•9 views

CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5AI score0.01825EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/17 12:00 a.m.•5 views

CVE-2022-3517: Uncontrolled Resource Consumption

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.2AI score0.01825EPSS
SaveExploits0References3
CVE
CVE
•added 2022/10/17 12:00 a.m.•480 views

CVE-2022-3517

CVE-2022-3517 corresponds to a minimatch ReDoS vulnerability in braceExpand. The issue is triggered by specific braceExpand inputs, enabling a Denial of Service with CVSS 3.1 v3.1 base score 7.5 (HIGH). Connected Atlassian Jira entries describe a DoS impact in Jira Software/Data Center, Server (1...

7.5CVSS7.7AI score0.01825EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2022/10/17 12:00 a.m.•4 views

CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

8.7CVSS0.01825EPSS
SaveExploits0References13
CNNVD
CNNVD
•added 2022/10/17 12:00 a.m.•8 views

minimatch 资源管理错误漏洞

minimatch is a global matcher in javascript by isaacs personal developer. A security vulnerability exists in minimatch that stems from a Regular Expression Denial of Service ReDoS that occurs when the braceExpand function is called with a specific parameter, resulting in a denial of service...

7.5CVSS7.4AI score0.01825EPSS
SaveExploits0References16
Debian CVE
Debian CVE
•added 2022/10/17 12:00 a.m.•71 views

CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.8AI score0.01825EPSS
SaveExploits0
OSV
OSV
•added 2022/10/17 12:00 a.m.•36 views

CVE-2022-3517

A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS7.3AI score
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2022/10/14 7:28 p.m.•70 views

CVE-2022-3517

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS4.3AI score0.01825EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/02/06 12:00 a.m.•14 views

PT-2022-6598

Name of the Vulnerable Software and Affected Versions minimatch versions 7.19.0 and earlier Confluence Data Center versions prior to 9.1.0 Description A vulnerability was found in the minimatch package, allowing a Regular Expression Denial of Service ReDoS when calling the braceExpand function wi...

9.8CVSS6.8AI score0.01825EPSS
SaveExploits0References132
Huntr
Huntr
•added 2021/09/17 6:23 a.m.•13 views

Inefficient Regular Expression Complexity in isaacs/minimatch

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in minimatch. It allows cause a denial of service when calling function braceExpand. The ReDoS vulnerability is mainly due to the regex /./ and can be exploited with the following code. Proof of Concept...

2.3AI score
SaveExploits0
Ubuntu
Ubuntu
•added 2021/03/15 8:59 p.m.•56 views

USN-4783-1: minimatch vulnerability

It was discovered that minimatch did not perform necessary bounds checking on regular expressions. An attacker could use this vulnerability to cause a denial of service...

7.5CVSS7.4AI score0.01731EPSS
SaveExploits1
OSV
OSV
•added 2021/03/15 8:59 p.m.•11 views

USN-4783-1 node-minimatch vulnerability

It was discovered that minimatch did not perform necessary bounds checking on regular expressions. An attacker could use this vulnerability to cause a denial of service...

7.5CVSS5.8AI score0.01731EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/01/13 12:00 a.m.•4 views

PT-2021-27505

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash type of Heap-double-free has been reported. The crash state involves the minimatch destroy function, ofctl parse flow, and ofctl parse target.c...

5.7AI score
SaveExploits0References2
Veracode
Veracode
•added 2019/01/15 9:12 a.m.•27 views

Denial Of Service (DoS)

minimatch is vulnerable to a Regular Expression Denial Of Service ReDoS attack. An attacker can pass a string value to the minimatchpath,pattern function to cause a ReDoS...

7.5CVSS7.3AI score0.01731EPSS
SaveExploits1References3Affected Software8
Rows per page
Query Builder