3366 matches found
CVE-2021-40896
A Regular Expression Denial of Service ReDOS vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails...
CVE-2021-40895
CVE-2021-40895 affects todo-regex v0.1.1 and is a Regular Expression Denial of Service (ReDOS) vulnerability triggered by crafted invalid TODO statements. Impact is denial of service; no exploit details provided beyond this. Remediation suggestion found in PT-2022-11323: for v0.1.1, update to a n...
CVE-2021-40894
A Regular Expression Denial of Service ReDOS vulnerability was discovered in underscore-99xp v1.7.2 when the deepValueSearch function is called...
CVE-2021-40894
CVE-2021-40894 affects underscore-99xp v1.7.2, where the deepValueSearch function can trigger a Regular Expression Denial of Service (ReDOS). Multiple sources (CNVD, NVD, Veracode, CNVD Chinese entry) describe a vulnerability in the deepValueSearch path that could lead to denial of service. The i...
Denial of service
A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails...
CVE-2021-40893
A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails...
CVE-2021-40893
CVE-2021-40893 describes a ReDOS vulnerability in the Node.js library validate-data v0.1.1 triggered while validating crafted invalid emails. Root cause: improper handling during email validation leads to excessive backtracking. Impact: potential Denial of Service. Affected component: validate-da...
CVE-2021-40892
A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgba strings...
Denial of service
A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgba strings...
CVE-2021-40892
CVE-2021-40892 affects validate-color version 2.1.0. A Regular Expression Denial of Service (ReDoS) occurs when handling crafted invalid rgb(a) strings, attributed to the validateHTMLColorRgb pathway. Impact described as denial of service; no explicit exploit details beyond input crafting. No con...
CVE-2021-40892
A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgba strings...
PT-2022-11322 · Unknown · Underscore-99Xp
Name of the Vulnerable Software and Affected Versions: underscore-99xp version 1.7.2 Description: A Regular Expression Denial of Service ReDOS issue was found when the deepValueSearch function is called. Recommendations: For underscore-99xp version 1.7.2, consider disabling the deepValueSearch...
EulerOS 2.0 SP8 : ruby (EulerOS-SA-2022-1951)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS regular expression Denial of Service via a long string. The fixed versions are 3.2....
Nextcloud: @nextcloud/logger NPM package brings vulnerable ansi-regex version
Summary: Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS due to the sub-patterns \;? and ?:;-a-zA-Z\d\/&.:=?%@. Details: Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its original and legitimate...
Regular Expression Denial Of Service (ReDoS)
pythonldap is vulnerable to regular expression denial of service. The vulnerability exists in tokenizer.py due to insufficient regular expression in the schema tokenizer which allows an attacker to send a crafted regex input causing an application crash...
CVE-2021-46823
CVE-2021-46823 affects python-ldap prior to 3.4.0. The vulnerability is a ReDoS in the LDAP schema parser when ldap.schema processes untrusted definitions, enabling a remote authenticated attacker to cause a denial of service. Public references in the provided documents consistently tie this to p...
GHSA-38J3-6FM8-PFGC Regular expression denial of service in Delight Nashorn Sandbox
An issue was discovered in Delight Nashorn Sandbox. There is an ReDoS vulnerability that can be exploited to launching a denial of service DoS attack...
Regular expression denial of service in Delight Nashorn Sandbox
An issue was discovered in Delight Nashorn Sandbox. There is an ReDoS vulnerability that can be exploited to launching a denial of service DoS attack...