Lucene search
K

3333 matches found

RedhatCVE
RedhatCVE
added 2022/10/14 7:28 p.m.59 views

CVE-2022-3517

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific arguments, resulting in a Denial of Service...

7.5CVSS4.3AI score0.01674EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/10/14 7:0 p.m.61 views

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or take ...

7.5CVSS8.1AI score0.02029EPSS
Exploits1References12Affected Software1
OSV
OSV
added 2022/10/14 4:15 p.m.24 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS7.3AI score
Exploits0References6
Prion
Prion
added 2022/10/14 4:15 p.m.25 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

5CVSS8.1AI score0.02029EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2022/10/14 12:0 a.m.19 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.9AI score0.02029EPSS
Exploits1References6
CVE
CVE
added 2022/10/14 12:0 a.m.291 views

CVE-2022-37603

CVE-2022-37603 describes a Regular Expression Denial of Service (ReDoS) in webpack-loader-utils, specifically in Function interpolateName.js (interpolateName.js) via the url variable. The issue affects loader-utils v2.0.0 and can lead to DoS conditions in applications that process input using thi...

7.5CVSS7.2AI score0.02029EPSS
Exploits1References6Affected Software1
Debian CVE
Debian CVE
added 2022/10/14 12:0 a.m.32 views

CVE-2022-37603

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js...

7.5CVSS6.8AI score0.02029EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2022/10/12 12:0 p.m.49 views

loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)

A regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils via the resourcePath variable in interpolateName.js. A badly or maliciously formed string could be used to send crafted requests that cause a system to crash or ta...

7.5CVSS7.2AI score0.0204EPSS
Exploits0References12Affected Software1
Veracode
Veracode
added 2022/10/12 2:12 a.m.94 views

Regular Expression Denial Of Service (ReDoS)

loader-utils is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the resourcePath variable in interpolateName.js, allowing an attacker to crash the application by providing a malicious input...

7.5CVSS7.3AI score0.0204EPSS
Exploits0References6Affected Software6
NVD
NVD
added 2022/10/11 7:15 p.m.23 views

CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS0.0204EPSS
Exploits0References7
OSV
OSV
added 2022/10/11 7:15 p.m.1 views

DEBIAN-CVE-2022-37599

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

7.5CVSS7.4AI score0.0204EPSS
Exploits0References1
Prion
Prion
added 2022/10/11 7:15 p.m.28 views

Denial of service

A Regular expression denial of service ReDoS flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js...

5CVSS7.8AI score0.0204EPSS
Exploits0References6Affected Software1
CVE
CVE
added 2022/10/11 12:0 a.m.220 views

CVE-2022-37599

CVE-2022-37599: A ReDoS in Function interpolateName (interpolateName.js) in webpack loader-utils 2.0.0 is triggered via the resourcePath variable in interpolateName.js. The Nessus/Confluence entry explicitly ties this CVE to affected Confluence deployments using webpack loader-utils, describing a...

7.5CVSS7.2AI score0.0204EPSS
Exploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.2 views

PT-2022-24021

Name of the Vulnerable Software and Affected Versions webpack loader-utils version 2.0.0 Description A Regular expression denial of service ReDoS flaw was found in the interpolateName function in interpolateName.js via the resourcePath variable. This issue could be exploited by sending crafted...

7.5CVSS7.2AI score0.0204EPSS
Exploits0References32
Tenable Nessus
Tenable Nessus
added 2022/10/10 12:0 a.m.27 views

EulerOS Virtualization 3.0.6.0 : ruby (EulerOS-SA-2022-2588)

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed...

7.5CVSS7.6AI score0.0387EPSS
Exploits2References4
Tenable Nessus
Tenable Nessus
added 2022/10/08 12:0 a.m.37 views

AlmaLinux 8 : ruby:2.7 (ALSA-2022:6447)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:6447 advisory. ruby: Regular expression denial of service vulnerability of Date parsing methods CVE-2021-41817 ruby: Cookie prefix spoofing in CGI::Cookie.parse...

7.5CVSS7.3AI score0.0387EPSS
Exploits2References4
Veracode
Veracode
added 2022/10/03 8:41 a.m.26 views

Regular Expression Denial Of Service (ReDoS)

css-what is vulnerable to regular expression denial of service. Regular expression used for reattr variable of index.js does not sufficiently include superscript in range, allowing an attacker to pass malicious input via the parse function to cause denial of service...

7.5CVSS7.3AI score0.01421EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2022/10/01 12:0 a.m.24 views

GHSA-P28H-CC7Q-C4FG css-what vulnerable to ReDoS due to use of insecure regular expression

The package css-what before 2.1.3 is vulnerable to Regular Expression Denial of Service ReDoS due to the use of insecure regular expression in the reattr variable of index.js. The exploitation of this vulnerability could be triggered via the parse function...

7.5CVSS7.3AI score0.01421EPSS
Exploits1References7
OSV
OSV
added 2022/10/01 12:0 a.m.31 views

GHSA-2J79-8PQC-R7X6 react-native-reanimated vulnerable to ReDoS

The package react-native-reanimated before 2.10.0 is vulnerable to Regular Expression Denial of Service ReDoS due to improper usage of regular expression in the parser of Colors.js...

7.5CVSS7.4AI score0.01222EPSS
Exploits1References8
Github Security Blog
Github Security Blog
added 2022/10/01 12:0 a.m.33 views

react-native-reanimated vulnerable to ReDoS

The package react-native-reanimated before 2.10.0 is vulnerable to Regular Expression Denial of Service ReDoS due to improper usage of regular expression in the parser of Colors.js...

7.5CVSS7.3AI score0.01222EPSS
Exploits1References8Affected Software1
Rows per page
Query Builder