CVE-2017-18077

index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...

CVE-2017-18077

CVE-2017-18077 : The brace-expansion package’s index.js is vulnerable to a Regular Expression Denial of Service (ReDoS) when given an expand argument with many comma characters. Affected: brace-expansion prior to 1.1.7. Impact and exploit details are documented in the connected sources. Remediati...

CVE-2017-18077

index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...

CVE-2017-18077

index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...

CVE-2017-18077: Improper Input Validation

index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service ReDoS attacks, as demonstrated by an expand argument containing many comma characters...

PT-2018-6658

Name of the Vulnerable Software and Affected Versions: brace-expansion versions prior to 1.1.7 Description: The issue concerns a Regular Expression Denial of Service ReDoS condition. It can be triggered by an expand argument containing many comma characters. There is a proof of concept...

Moderate severity vulnerability that affects marked

Withdrawn This advisory has been withdrawn, per NVD: "This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue." Original Description A Regular expression Denial of Service ReDoS vulnerability in the file marked.js of the marked npm package tested on...

Regular Expression Denial Of Service (ReDoS)

ua-parser-js is vulnerable to regular expression denial of service ReDoS attacks. An attacker can pass a string value to the getOS function to cause a ReDoS...

PT-2018-6518

Name of the Vulnerable Software and Affected Versions: marked versions prior to the version where the issue was fixed Description: A Regular expression Denial of Service ReDoS issue in the marked.js file of the marked npm package allows a remote attacker to overload and crash a server by passing ...

ua-parser-js npm module ReDoS

This module exploits a Regular Expression Denial of Service vulnerability in the npm module "ua-parser-js". Server-side applications that use "ua-parser-js" for parsing the browser user-agent string will be vulnerable if they call the "getOS" or "getResult" functions. This vulnerability was fixed...

08cms (1.0.0), 24_hrs_js (1.0.0) +6201 more potentially affected by CVE-2015-8855 via semver (>=1.0.7, <=4.3.1)

semver NPM version =1.0.7, =0.0.1-alpha, =0.0.2, =0.0.1, =0.11.6, =1.2.0, =0.1.3-v1, =0.0.1, =0.0.11, =0.0.1, =1.0.0 and more Source cves: CVE-2015-8855 Source advisory: OSV:GHSA-X6FG-F45M-JF5Q...

192.168.0.172 (4.6.1), 352-wascally (>=0.2.4, <=0.2.5) +5440 more potentially affected by CVE-2015-8315 via ms (>=0.1.0, <=0.7.0)

ms NPM version =0.1.0, =0.2.4, =1.0.0, =0.2.0, =0.0.1, =0.0.8, =1.8.0, =0.1.0, =1.0.0, =0.9.0, =1.4.0, =1.0.1, =3.1.2 - @asbjornenge/microbe 1.0.1 - @auser/metalsmith-watch 1.0.4 and more Source cves: CVE-2015-8315 Source advisory: OSV:GHSA-3FX5-FWVR-XRJG...

Regular Expression Denial of Service in marked

Versions 0.3.3 and earlier of marked are affected by a regular expression denial of service ReDoS vulnerability when passed inputs that reach the em inline rule. Recommendation Update to version 0.3.4 or later...

Regular Expression Denial of Service in is-my-json-valid

Version of is-my-json-valid before 2.12.4 are vulnerable to regular expression denial of service ReDoS via the email validation function. Recommendation Update to version 2.12.4 or later...

Regular Expression Denial Of Service (ReDoS)

moment is vulnerable to denial of service DoS attacks. These attacks are possible because the regular expression that is used for matching dates takes awhile for long strings...

CVE-2017-15010

A ReDoS regular expression denial of service flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU...

CVE-2017-15010

A ReDoS regular expression denial of service flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU...

CVE-2017-15010

A ReDoS regular expression denial of service flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU...

UBUNTU-CVE-2017-15010

A ReDoS regular expression denial of service flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU...

Design/Logic Flaw

A ReDoS regular expression denial of service flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU...