4876 matches found
Moderate: Red Hat Security Advisory: ruby:2.7 security, bug fix, and enhancement update
An update for the ruby:2.7 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
ALSA-2023:3821 Moderate: ruby:2.7 security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby 2.7. BZ2189465 Security Fixes: ruby/cgi-gem: HTTP response splitting i...
RHEL 8 : ruby:2.7 (RHSA-2023:3821)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3821 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
CentOS 8 : ruby:2.7 (CESA-2023:3821)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:3821 advisory. - The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-sqlparse (SUSE-SU-2023:2619-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2619-1 advisory. - CVE-2023-30608: Fixed a Regular Expression Denial of Service ReDOS vulnerability bsc1210617. Tenable ha...
CVE-2022-25883
...
word-wrap vulnerable to Regular Expression Denial of Service
All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of an insecure regular expression within the result variable...
CVE-2023-26115
CVE-2023-26115 affects the word-wrap package. The vulnerability is a Regular Expression Denial of Service (ReDoS) caused by an insecure regex in the result variable, affecting all versions. Public references cite a fix in word-wrap 1.2.4 (and releases tagged 1.2.4) with related discussion and a p...
CVE-2023-26115
All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of an insecure regular expression within the result variable...
CVE-2023-26115: Inefficient Regular Expression Complexity
All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of an insecure regular expression within the result variable...
Withdrawn Advisory: urlnorm vulnerable to Regular Expression Denial of Service
Withdrawn Advisory This advisory has been withdrawn because the security impact of the slow printing of URLs has been disputed. This link is maintained to preserve external references. Original Description The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service ReDos...
GHSA-FQHP-RHM6-8RRJ Withdrawn Advisory: urlnorm vulnerable to Regular Expression Denial of Service
Withdrawn Advisory This advisory has been withdrawn because the security impact of the slow printing of URLs has been disputed. This link is maintained to preserve external references. Original Description The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service ReDos...
semver vulnerable to Regular Expression Denial of Service
Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0.8.18-p11 (0.8.18-p12) +53932 more potentially affected by CVE-2022-25883 via semver (>=2.0.8, <=5.7.1)
semver NPM version =2.0.8, =1.0.1, =0.0.2, =1.0.4, =1.0.0, =1.0.3, =1.0.9, =0.1.0, =0.3.0 and more Source cves: CVE-2022-25883 Source advisory: OSV:GHSA-C2QF-RXJJ-QQGW...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +9095 more potentially affected by CVE-2022-25883 via semver (>=6.0.0, <=6.3.0)
semver NPM version =6.0.0, =1.0.1, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.1, =3.4.1, =3.4.2 and more Source cves: CVE-2022-25883 Source advisory: OSV:GHSA-C2QF-RXJJ-QQGW...
007putra-my-bot (1.1.1), 03-asenkronsdasdsadavehttprequest (1.0.0) +17731 more potentially affected by CVE-2022-25883 via semver (>=7.0.0, <=7.5.1)
semver NPM version =7.0.0, =7.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on semver and may be impacted: - 007putra-my-bot 1.1.1 - 03-asenkronsdasdsadavehttprequest 1.0.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 -...
CVE-2022-25883
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...
AZL-27207 CVE-2022-25883 affecting package nodejs for versions less than 16.20.1-2
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...
