3771 matches found
EUVD-2026-76169
The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULTREGEXNAMEFINDER.EMAIL and DEFAULTREGEXNAMEFINDER.URL - contain ambiguous nested quantifiers. An application that obtains these finders through RegexNameFinderFactory.getDefaultRegexNameFinders...
CVE-2026-82617
Apache OpenNLP versions 2.0.0 through 2.5.11 and 3.0.0-M1 through 3.0.0-M5 are affected by ambiguous nested quantifiers in the built-in EMAIL and URL name-finder patterns of RegexNameFinderFactory. The EMAIL pattern suffers quadratic-time ReDoS: a ~32 KB input without an @ forces re-scanning from...
GHSA-JP53-MHQP-8XCG vulnerabilities
Vulnerabilities for packages: open-webui...
PT-2026-90004
The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT REGEX NAME FINDER.EMAIL and DEFAULT REGEX NAME FINDER.URL - contain ambiguous nested quantifiers. An application that obtains these finders through...
PoC-CVE-2025-25200
CVE-2025-25200 コンテキスト 脆弱性: CVE-2025-25200 タイプ: Regular Expression Denial of Service ReDoS コンポーネント: Kao = 2.0.0, = 3.0.0-alpha.0, = 1.0.0, 1.7.1, 0.21.2 説明: この脆弱性は、二次時間計算量 On²、またはより深刻なシナリオでは指数時間計算量 O2ⁿ...
EUVD-2026-74275
n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path...
n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
Impact The Git node's clone operation matched the destination path against the default N8NBLOCKFILEPATTERNS expression, which was written so that a crafted path caused catastrophic backtracking. Evaluation runs synchronously in the main n8n process, so an authenticated user could freeze the...
UBUNTU-CVE-2026-87819
GitPython before 3.1.60 contains a regular expression denial of servic...
CVE-2026-87819
GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.nameemailregex that processes commit author and committer fields. Attackers can craft a commit object with a malformed author field containing an unterminated angle bracket to cause quadratic...
EUVD-2026-74845
GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.nameemailregex that processes commit author and committer fields. Attackers can craft a commit object with a malformed author field containing an unterminated angle bracket to cause quadratic...
CVE-2026-87819
GitPython before 3.1.60 is vulnerable to a regular expression denial of service (ReDoS) in the Actor.name_email_regex pattern used to parse commit author and committer fields. An attacker can craft a commit object with a malformed author field containing an unterminated angle bracket , triggering...
CVE-2026-87819 GitPython before 3.1.60 Denial of Service via ReDoS
GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.nameemailregex that processes commit author and committer fields. Attackers can craft a commit object with a malformed author field containing an unterminated angle bracket to cause quadratic...
CVE-2024-22641
CVE-2024-22641 脆弱性の種類 正規表現によるサービス拒否 ReDoS 影響を受ける製品とバージョン TCPDF root@kitploit: AddPage; $pdf-ImageSVG$file='poc.svg'; ?...
CVE-2024-22640
CVE-2024-22640 脆弱性の種類 正規表現サービス拒否（ReDoS） 影響を受ける製品とバージョン TCPDF convertHTMLColorToDec'"t"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000!',$ref; ? 注: 脆弱性のあるコード行の後に preglasterror で確認すると、正規表現は PREGBACKTRACKLIMITERROR で終了します...
CVE-2022-45729
Este repositorio no tiene un README...
CVE-2026-86081
n8n , an open-source workflow automation platform, is vulnerable to Regular Expression Denial of Service (ReDoS) in its Git node clone operation. Prior to versions 1.123.76 , 2.37.7 , and 2.38.2 , the default N8N_BLOCK_FILE_PATTERNS regex (^(./).git(/.)$) permitted catastrophic backtracking when ...
CVE-2026-86081 n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8NBLOCKFILEPATTERNS regular expression. The pattern ^./.git/.$ allowed catastrophic backtracking and ran...
CVE-2026-86081 n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8NBLOCKFILEPATTERNS regular expression. The pattern ^./.git/.$ allowed catastrophic backtracking and ran...
Tiptap: Quadratic ReDoS in block and inline Markdown attribute parsing
Summary @tiptap/core contains two quadratic regular-expression denial-of-service paths in its default Markdown attribute parsers. Pandoc-style block attributes use two unanchored greedy expressions that rescan repeated QUOTED0 prefixes. Inline shortcode attributes use another unanchored greedy ke...