USN-5610-1 rust-regex vulnerability

Addison Crump discovered that rust-regex did not properly limit the complexity of the regular expressions regex it parses. An attacker could possibly use this issue to cause a denial of service...

Inefficient Regular Expression Complexity potentially leads to Denial of Service in

Description Inefficient regular expression complexity of lowercase and uppercase regex could lead to a denial of service attack. With a formed payload 'a' + 'a'.repeati + 'A', only 32 characters payload could take 29443 ms time execution when testing lowercase. The same issue happens with...

DEBIAN-CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

UBUNTU-CVE-2021-3842

nltk is vulnerable to Inefficient Regular Expression Complexity...

python-pygments: ReDoS in multiple lexers

A denial of service attack was discovered against pygments. Some of the regular expressions used to tokenise source code for highlighting have exponential complexity. A specially crafted input file could cause pygments to take effectively infinite time to parse, consuming CPU resources and denyin...

UBUNTU-CVE-2021-3765

validator.js is vulnerable to Inefficient Regular Expression Complexity...

GHSA-X55W-VJJP-222R inflect vulnerable to Inefficient Regular Expression Complexity

inflect is customizable inflections for nodejs. inflect is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3820

inflect is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3820

inflect is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822 Inefficient Regular Expression Complexity in josdejong/jsoneditor

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3810

CVE-2021-3810: code-server is vulnerable to Inefficient Regular Expression Complexity. The CVE has a high base impact (CVSS v3.1: 7.5, NETWORK, LOW attack complexity, no user interaction) in the NVD/NVDC entries; other mirrors (OSV, Red Hat, GHSA) corroborate the same issue. The connected records...

Coder code-server 安全漏洞

Coder Code-Server is a U.S. Coder company based on Microsoft's open source Visual Studio Code development products. It is used to build a convenient and unified development environment for developers. A security vulnerability exists in code-server that stems from vulnerability to inefficient...

CVE-2021-3749

axios is vulnerable to Inefficient Regular Expression Complexity...

PT-2023-11819 · Mholt · Papaparse

Name of the Vulnerable Software and Affected Versions: mholt PapaParse versions up to 5.1.x Description: A vulnerability was found in the file papaparse.js, leading to inefficient regular expression complexity. The issue is classified as problematic and affects an unknown function. Upgrading to...