4365 matches found
Design/Logic Flaw
sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...
PYSEC-2021-333
sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...
PYSEC-2021-333
sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...
UBUNTU-CVE-2021-32839
sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...
CVE-2021-32839
CVE-2021-32839 affects the Python package sqlparse . The vulnerability is a ReDoS in the StripComments regex used by the formatting path for removing comments, causing exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments in versions 0.4.0 and 0.4.1. The issue ...
Regular Expression Denial Of Service (ReDoS)
ansi-regex is vulnerable to regular expression denial of service. The vulnerability exists due to an inefficient handling of user-provided string pattern, causing intensive processing of regular expression machine and application crash...
The vulnerability in the intermediate software of the Host Authorization framework of the actionpack ruby gem in the Ruby on Rails software platform arises from insufficient input validation. This allows attackers to access sensitive data and compromise its integrity.
The vulnerability in the Host Authorization framework of the actionpack ruby gem in the Ruby on Rails software platform relates to the conversion of strings in config.hosts without a starting point, into regular expressions without encapsulation. Exploiting this vulnerability can allow an attacke...
CVE-2021-3810
code-server is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3807
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
DEBIAN-CVE-2021-3807
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3807
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3807
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
UBUNTU-CVE-2021-3807
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3810
CVE-2021-3810: code-server is vulnerable to Inefficient Regular Expression Complexity. The CVE has a high base impact (CVSS v3.1: 7.5, NETWORK, LOW attack complexity, no user interaction) in the NVD/NVDC entries; other mirrors (OSV, Red Hat, GHSA) corroborate the same issue. The connected records...
Coder code-server 安全漏洞
Coder Code-Server is a U.S. Coder company based on Microsoft's open source Visual Studio Code development products. It is used to build a convenient and unified development environment for developers. A security vulnerability exists in code-server that stems from vulnerability to inefficient...
PT-2021-21939
Name of the Vulnerable Software and Affected Versions: nth-check versions affected versions not specified Description: The issue is related to Inefficient Regular Expression Complexity, specifically a Regular Expression Denial of Service ReDoS vulnerability. This vulnerability causes a denial of...
CVE-2021-3807
CVE-2021-3807 affects ansi-regex, enabling Regular Expression Denial of Service (ReDoS) with high impact (CVSS v3.1 base 7.5). Connected docs confirm DoS in Jira Data Center/Server and Jira Service Management, with fixed versions including Jira DC/Server 10.3.16+ and 11.2.1+. Remediation is to up...
PT-2021-21950 · Unknown · Code-Server
Name of the Vulnerable Software and Affected Versions: code-server affected versions not specified Description: The issue is related to Inefficient Regular Expression Complexity. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...
ansi-regex 安全漏洞
Ansi-Regex is a regular expression used to match ANSI escape codes. A security vulnerability exists in ansi-regex that stems from vulnerability to inefficient regular expression complexity...
