CVE-2026-105854 Payload: ReDoS in Multipart Content-Type Validation

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a malformed multipart request body can cause multipart Content-Type processing to take an extremely long time, resulting in uncontrolled resource...

CVE-2026-105854 Payload: ReDoS in Multipart Content-Type Validation

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a malformed multipart request body can cause multipart Content-Type processing to take an extremely long time, resulting in uncontrolled resource...

Security Bulletin: middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags.

Summary Upgrade to InformixHQ 3.3.2 included in 14.10.14W1 and 15.0.1.16 Vulnerability Details CVEID:CVE-2026-69207 DESCRIPTION: Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.34, the built-in CORS middleware, hono/cors, is vulnerable to a...

CVE-2026-105646 Ghost: Regular Expression Denial of Service in Content Import

Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access. This issue is fixed in version 6.67.0...

CVE-2026-105645 Ghost: Regular Expression Denial of Service in External Media Inliner

Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access. This issue is fixed in version 6.67.0...

CVE-2023-32309

CVE-2023-32309...

CVE-2020-5236

Waitress 1.4.2 ReDoS - CVE-2020-5236 La version 1.4.2 de Waitress permet une attaque DOS lorsque Waitress reçoit un en-tête contenant des caractères invalides. Lorsqu'un en-tête comme "Bad-header: xxxxxxxxxxxxxxx\x10" est reçu, cela amène le moteur d'expression régulière à effectuer un...

Astra Linux – Vulnerability in node-minimatch

Minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, matchOne performed unbounded recursive backtracking when a glob pattern contained multiple non-adjacent GLOBSTAR...

CVE-2023-4220

CVE-2023-4220...

CVE-2023-31606

CVE-2023-31606 Vulnérabilité Un problème de déni de service par expression régulière ReDoS a été découvert dans la fonction sanitizehtml de la gemme redcloth = v4.0.0. Cette vulnérabilité permet à des attaquants de provoquer un déni de service DoS en fournissant une charge utile spécialement...

Regular Expression Denial of Service (ReDoS)

Overview mammoth is a Convert Word documents from docx to simple HTML and Markdown Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supp...

CVE-2026-105219 Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser

Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an unterminated quoted string of repeated backslash escapes in...

CVE-2026-105219 Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser

Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an unterminated quoted string of repeated backslash escapes in...

CVE-2026-105219 Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser

Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an unterminated quoted string of repeated backslash escapes in...

CVE-2026-105219

Mammoth.js versions 1.3.0 before 1.12.3 are vulnerable to a Regular Expression Denial of Service (ReDoS) . The flaw exists in the style map tokeniser located in lib/styles/parser/tokeniser.js due to overlapping regex alternatives . An attacker can provide a crafted .docx file containing an unterm...

CVE-2023-27704

CVE-2023-27704 CVE-2023-27704 تم اكتشاف أن Void Tools Everything الإصدار الأقل من v1.4.1.1022 يحتوي على هجوم رفض الخدمة عبر التعبير العادي ReDoS الإصلاح في Everything 1.5 alpha الوصف المقترح تم اكتشاف أن Void Tools Everything الإصدار الأقل من v1.4.1.1022 يحتوي على هجوم رفض الخدمة عبر التعبير العا...

CVE-2026-87819

A flaw was found in GitPython. A remote attacker could exploit a regular expression denial of service ReDoS vulnerability by crafting a malicious commit object. Specifically, a malformed author field containing an unterminated angle bracket can cause excessive processing, leading to the exhaustio...

axios-redos

هجوم رفض الخدمة عبر التعبير المنتظم في Axios يحتوي هذا المستودع على إثبات المفهوم POC لـ CVE-2021-3749. نظرة عامة تم العثور على ثغرة ReDoS رفض الخدمة عبر التعبير المنتظم في حزمة axios. المهاجم الذي يستطيع تقديم إدخال مصمم خصيصًا لدالة trim قد يتسبب في استهلاك التطبيق لكمية مفرطة من وحدة المعالجة...

CVE-2024-27088

CVE-2024-27088 ملخص الثغرة CVE-2024-27088 Feb 26, 2024 ReDoS في حزمة node.js كجزء من مشروع rebob وصف الثغرة إرشادات GitHub /^\sfunction\s\0-'-\uffff+\s\0--\uffff\s/ يمكن استغلال هذه الثغرة عند وجود خلل في توازن الأقواس، مما يؤدي إلى تراجع مفرط وزيادة كبيرة في حمل وحدة المعالجة المركزية ووقت...

CVE-2023-43646

CVE-2023-43646 ملخص الثغرة CVE-2023-43646 CVSS : 8.6 Sep 26, 2023 ReDoS في حزمة node.js كجزء من مشروع rebob شرح الثغرة إعلانات github /\sfunction?:\s|\s/^?:/+/\s^\/+/ يمكن استغلال هذه الثغرة عند وجود عدم توازن في الأقواس، مما يؤدي إلى تتبع خلفي مفرط وبالتالي زيادة حمل وحدة المعالجة المركزية ووقت...