CVE-2026-79770 Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer

Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...

CVE-2026-79770 Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer

Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in ajv (CVE-2025-69873)

Summary A Regular Expression Denial of Service ReDoS vulnerability in the ajv json-schema validator library CVE-2025-69873 used by IBM InfoSphere Optim Archive Viewer on Windows and Linux platforms has been addressed by upgrading the component versions to 6.14.0, 6.15.0, 8.18.0, and 8.20.0...

CVE-2026-66766

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

CVE-2026-66766 Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

EUVD-2026-65191

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

CVE-2026-66766 Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

CVE-2026-66766

SAP S/4HANA (Private Cloud) is affected by a Regular Expression Denial of Service (ReDoS) vulnerability in a third-party component within the Manage Supply Protection functionality. An unauthenticated attacker can supply specially crafted input that triggers excessive regex processing, exhausting...

PT-2026-81119

Name of the Vulnerable Software and Affected Versions SAP S/4HANA Private Cloud affected versions not specified Description SAP S/4HANA Private Cloud utilizes a third-party component susceptible to a Regular Expression Denial of Service ReDoS, a condition where a specially crafted input causes th...

CVE-2026-66766: Inefficient Regular Expression Complexity

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

Security update for python-sqlparse

This update for python-sqlparse fixes the following issues: CVE-2026-54284: TokenList.init materializes Osubtree value per group, causing CPU DoS before depth/token caps trigger bsc1275459. CVE-2026-59893: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS bsc1275461...

SUSE-SU-2026:3762-1 Security update for python-sqlparse

This update for python-sqlparse fixes the following issues: - CVE-2026-54284: TokenList.init materializes Osubtree value per group, causing CPU DoS before depth/token caps trigger bsc1275459. - CVE-2026-59893: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS bsc1275461. -...

PT-2026-84283

Name of the Vulnerable Software and Affected Versions xmldom versions 0.7.0 through 0.8.14 Description The parser in lib/sax.js uses an unanchored global regular expression / t r+$/g to trim captured end-tag names. When an end tag contains a long sequence of whitespace followed by a non-whitespac...

Linux Distros Unpatched Vulnerability : CVE-2026-72818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain bran...

CVE-2026-70656

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. From 3.5.1 until 3.9.2, an authenticated admin or superadmin can set matchMethod to regex and place a malicious expression...

EUVD-2026-64038

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. From 3.5.1 until 3.9.2, an authenticated admin or superadmin can set matchMethod to regex and place a malicious expression...

CVE-2026-70656 Checkmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced Matching

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. From 3.5.1 until 3.9.2, an authenticated admin or superadmin can set matchMethod to regex and place a malicious expression...

CVE-2026-70656

Checkmate (open-source self-hosted server monitoring tool) versions 3.5.1 through 3.9.2 are vulnerable to ReDoS (Regular Expression Denial of Service). An authenticated admin or superadmin can set matchMethod to regex and inject a malicious expression into the expectedValue field for advanced HTT...

CVE-2026-70656 Checkmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced Matching

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. From 3.5.1 until 3.9.2, an authenticated admin or superadmin can set matchMethod to regex and place a malicious expression...

CVE-2026-70656 Checkmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced Matching

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. From 3.5.1 until 3.9.2, an authenticated admin or superadmin can set matchMethod to regex and place a malicious expression...