3767 matches found
recheck
recheck The trustworthy ReDoS checker License MIT License. 2020-2025 C TSUYUSATO "MakeNowJust" Kitsune...
git-vuln-finder
git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...
regexploit
Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...
CVE-2023-43646
CVE-2023-43646 취약점 개요 CVE-2023-43646 CVSS : 8.6 Sep 26, 2023 ReDoS in node.js package rebob 프로젝트의 일환 취약점 설명 github advisories root@kitploit: /\sfunction?:\s|\s/^?:/+/\s^\/+/ This vulnerability can be exploited when there is an imbalance in parentheses, which results in excessive backtracking and...
axios-redos
Атака отказа в обслуживании через регулярные выражения в Axios Этот репозиторий содержит POC уязвимости CVE-2021-3749. Обзор В пакете axios была обнаружена уязвимость ReDoS отказ в обслуживании через регулярные выражения. Злоумышленник, способный передать специально сформированные входные данные ...
exploit-workshop
exploit-workshop In this step by step workshop you'll learn how to exploit various real world vulnerabilities existing in vulnerable versions of packages in a Node.js and Java application. Required software you need to install for this workshop You can do this workshop in 2 different flavours Usi...
vue-template-compiler-patched
vue-template-compiler-patched A security-patched version of vue-template-compiler to fix the prototype pollution vulnerability CVE-2024-6783 and the ReDoS vulnerability CVE-2024-9506. Based on [email protected]. Development and issues live in vue-patched. Related If you use the Vue full buil...
regexploit
Regexploit 정규 표현식 서비스 거부 ReDoS에 취약한 정규식을 찾습니다. 자세한 내용은Doyensec 블로그에서 확인하세요. 많은 기본 정규 표현식 파서는 최악의 경우 복잡도가 제한되지 않습니다. 정규식 일치는 일치하는 입력 문자열이 주어지면 빠를 수 있습니다. 그러나 특정 비일치 입력 문자열은 정규식 일치 엔진이 엄청난 백트래킹 루프에 빠지게 하여 처리하는 데 오랜 시간이 걸릴 수 있습니다. 이는 CPU가 정규식을 일치시키려고 붙잡혀 있기 때문에 서비스 거부를 유발할 수 있습니다. 이 도구는 다음을 위해...
CVE-2026-82617
The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULTREGEXNAMEFINDER.EMAIL and DEFAULTREGEXNAMEFINDER.URL - contain ambiguous nested quantifiers. An application that obtains these finders through RegexNameFinderFactory.getDefaultRegexNameFinders...
CVE-2026-82617 Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns
The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULTREGEXNAMEFINDER.EMAIL and DEFAULTREGEXNAMEFINDER.URL - contain ambiguous nested quantifiers. An application that obtains these finders through RegexNameFinderFactory.getDefaultRegexNameFinders...
CVE-2026-82617
Apache OpenNLP versions 2.0.0 through 2.5.11 and 3.0.0-M1 through 3.0.0-M5 are affected by ambiguous nested quantifiers in the built-in EMAIL and URL name-finder patterns of RegexNameFinderFactory. The EMAIL pattern suffers quadratic-time ReDoS: a ~32 KB input without an @ forces re-scanning from...
EUVD-2026-76169
The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULTREGEXNAMEFINDER.EMAIL and DEFAULTREGEXNAMEFINDER.URL - contain ambiguous nested quantifiers. An application that obtains these finders through RegexNameFinderFactory.getDefaultRegexNameFinders...
CVE-2023-32309
CVE-2023-32309...
GHSA-JP53-MHQP-8XCG vulnerabilities
Vulnerabilities for packages: open-webui...
PT-2026-90004
The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT REGEX NAME FINDER.EMAIL and DEFAULT REGEX NAME FINDER.URL - contain ambiguous nested quantifiers. An application that obtains these finders through...
PoC-CVE-2025-25200
CVE-2025-25200 Контекст Уязвимость: CVE-2025-25200 Тип: Regular Expression Denial of Service ReDoS Компонент: Kao = 2.0.0, = 3.0.0-alpha.0, = 1.0.0, 1.7.1, 0.21.2 Описание: Эта уязвимость демонстрирует квадратичную временную сложность On2 или, в более критичных сценариях, экспоненциальную O2n, то...
CVE-2023-27704
CVE-2023-27704 CVE-2023-27704 Void Tools Everything ниже версии v1.4.1.1022 содержит уязвимость типа «Отказ в обслуживании через регулярное выражение» ReDoS. исправление в Everything 1.5 alpha Предлагаемое описание Void Tools Everything ниже версии v1.4.1.1022 содержит уязвимость типа «Отказ в...
EUVD-2026-74275
n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path...
n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
Impact The Git node's clone operation matched the destination path against the default N8NBLOCKFILEPATTERNS expression, which was written so that a crafted path caused catastrophic backtracking. Evaluation runs synchronously in the main n8n process, so an authenticated user could freeze the...
