vue-template-compiler-patched

vue-template-compiler-patched A security-patched version of vue-template-compiler to fix the prototype pollution vulnerability CVE-2024-6783 and the ReDoS vulnerability CVE-2024-9506. Based on [email protected]. Development and issues live in vue-patched. Related If you use the Vue full buil...

regexploit

Regexploit Encuentra expresiones regulares vulnerables a Denegación de Servicio por Expresión Regular ReDoS. Más información enel blog de Doyensec Muchos analizadores de expresiones regulares por defecto tienen una complejidad de caso peor no acotada. La coincidencia de regex puede ser rápida...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

CVE-2026-85999

CVE-2026-85999 affects Soup Sieve , a CSS selector library used with Beautiful Soup 4, in versions prior to 2.9 . The root cause is a polynomial-time (O(n²)) regular expression in RE_WS_END within selector_iter (src/soupsieve/css_parser.py). An end-anchored whitespace-and-comment expression, used...

CVE-2026-85999 Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, selectoriter in src/soupsieve/cssparser.py trims the raw selector with REWSEND, an end-anchored WSC whitespace-and-comment expression used with search, so the regular expression engine retries a greedy...

CVE-2026-86000 Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, the selector parser in src/soupsieve/cssparser.py defines IDENTIFIER with adjacent quantified groups over overlapping character classes, and VALUE embeds IDENTIFIER for attribute selectors. When an...

CVE-2026-86000

Soup Sieve is a CSS selector library for Beautiful Soup 4. Prior to 2.9 , the selector parser in src/soupsieve/css_parser.py defines IDENTIFIER with adjacent quantified groups over overlapping character classes, and VALUE embeds IDENTIFIER for attribute selectors. An attacker-controlled selector ...

CVE-2026-63460

Vendure is an open-source headless commerce platform. Prior to 3.6.5, the public Shop GraphQL API allows an unauthenticated caller to supply a catastrophically backtracking pattern through StringOperators.regex. packages/core/src/service/helpers/list-query-builder/parse-filter-params.ts passes th...

Vendure: Unauthenticated ReDoS via `regex` filter on SQLite backends

Summary !IMPORTANT Only instances running on the SQLite driver better-sqlite3 are affected; SQLite is usually used in development/testing backend, so production deployments on PostgreSQL or MySQL/MariaDB are unaffected. The StringOperators.regex filter exposed on the public Shop GraphQL API is...

CVE-2026-63460

Vendure , an open-source headless commerce platform, is vulnerable to an unauthenticated Regular Expression Denial of Service (ReDoS) prior to version 3.6.5 . The public Shop GraphQL API exposes StringOperators.regex, which passes a user-supplied pattern to a synchronous JavaScript UDF registered...

recheck

recheck The trustworthy ReDoS checker License MIT License. 2020-2025 C TSUYUSATO "MakeNowJust" Kitsune...

CVE-2023-32309

CVE-2023-32309...

exploit-workshop

exploit-workshop En este taller paso a paso aprenderás cómo explotar varias vulnerabilidades del mundo real que existen en versiones vulnerables de paquetes en una aplicación Node.js y Java. Software necesario que debes instalar para este taller Puedes realizar este taller de 2 formas diferentes...

EUVD-2026-81299

joi npm package joi, hapi.js versions =17.2.0 =18.0.0 18.2.6 are vulnerable to regular expression denial of service in the Joi.string.isoDate validation rule. One of the regular expressions the rule applies to the input is unanchored, so a valid ISO date followed by a long run of fractional-secon...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

axios-redos

Ataque de Denegación de Servicio por Expresión Regular en Axios Este repositorio contiene un POC de CVE-2021-3749. Resumen Se encontró una falla de ReDoS denegación de servicio por expresión regular en el paquete axios. Un atacante que pueda proporcionar una entrada manipulada a la función trim...

CVE-2026-92599

joi (npm package, hapi.js) versions >=17.2.0 =18.0.0

CVE-2023-27704

CVE-2023-27704 CVE-2023-27704 Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service ReDoS fix at Everything 1.5 alpha Suggested description Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of...

CVE-2024-22641

CVE-2024-22641 Tipo de Vulnerabilidad Denegación de Servicio por Expresión Regular ReDoS Producto y Versión Afectados TCPDF root@kitploit: AddPage; $pdf-ImageSVG$file='poc.svg'; ?...

CVE-2024-22640

CVE-2024-22640 Tipo de vulnerabilidad Denegación de servicio por expresión regular ReDoS Producto y versión afectados TCPDF convertHTMLColorToDec'"t"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000!',$ref; ? Nota: Al...