3482 matches found
Regular Expression Denial Of Service (ReDoS)
scss-tokenizer is vulnerable to regular expression denial of service. The vulnerability exists in the loadAnnotation function of previous-map.js due to the insecure regex pattern used in the match attribute, allowing an attacker to crash the application by providing malicious input...
CVE-2022-25758
All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service ReDoS via the loadAnnotation function, due to the usage of insecure regex...
CVE-2022-25758
All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service ReDoS via the loadAnnotation function, due to the usage of insecure regex...
CVE-2022-25758
CVE-2022-25758 affects the scss-tokenizer package: every version is vulnerable to a ReDoS via loadAnnotation() caused by insecure regex. Exploitation is described as remote, enabling Denial of Service. Remediation is to upgrade IBM WebMethods Cloud Pak System components to supported versions; IBM...
CVE-2022-25758 Regular Expression Denial of Service (ReDoS)
All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service ReDoS via the loadAnnotation function, due to the usage of insecure regex...
that-value Regular Expression Denial of Service (ReDOS) Vulnerability
that-value is a multilingual platform validator package by the individual developer Paweł Stefański, Poland. A Regular Expression Denial of Service ReDOS vulnerability exists in that-value version v0.1.3, which can be exploited by an attacker to cause a denial of service when validating a crafted...
Regular Expression Denial Of Service (ReDoS)
scaffold-helper is vulnerable to regular expression denial of service ReDoS attacks. A remote attacker is able to trigger denial of service conditions due to insufficient checks in getProcessedPath or getDynamicFilename functions. The vulnerability is exploited via copying crafted invalid files...
Regular Expression Denial Of Service (ReDoS)
org.apache.tika:tika is vulnerable to regular expression denial of service ReDoS attacks. An attacker is able to cause denial of service conditions to the users who are running the StandardsExtractingContentHandler component, due to an insecure regular expression usage in setThreshold function by...
Regular Expression Denial Of Service (ReDoS)
scniro-validator is vulnerable to regular expression denial of service. The vulnerability exists due to a lack of input validation which allows an attacker to crash the system via maliciously crafted email...
Regular Expression Denial Of Service (ReDoS)
repo-git-downloader is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for match repository urls in the getOptions function of option.js, allowing an attacker to crash the application by downloading maliciously crafted git...
Regular Expression Denial Of Service (ReDoS)
underscore-99xp is vulnerable to regular expression denial of service ReDoS attacks. A remote attacker is able to cause denial of service conditions via calling the vulnerable deepValueSearch function...
Regular Expression Denial Of Service (ReDoS)
validate-color is vulnerable to regular expression denial of service ReDoS attacks. A remote attacker is able to cause denial of service conditions via injecting crafted invalid rgba strings through validateHTMLColorRgb function...
CVE-2021-40900
A Regular Expression Denial of Service ReDOS vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails...
Denial of service
A Regular Expression Denial of Service ReDOS vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails...
Denial of service
A Regular Expression Denial of Service ReDOS vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails...
CVE-2021-40901
A Regular Expression Denial of Service ReDOS vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails...
CVE-2021-40901
CVE-2021-40901 affects scniro-validator v1.0.1 and is described as a Regular Expression Denial of Service (ReDoS) vulnerability triggered when validating crafted invalid emails. The root cause is a faulty/overly backtracking-prone regex in the email validation path, which can cause high CPU usage...
CVE-2021-40900
A Regular Expression Denial of Service ReDOS vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails...
CVE-2021-40900
CVE-2021-40900 affects regexfn v1.0.5, where the isEmail validation can be abused by crafted invalid emails to trigger a ReDoS. Root cause: the regex handling allows excessive processing under certain inputs. Impact: potential application denial of service; CVSSv3.1 base score 7.5 (HIGH), network...
