Lucene search
+L

461 matches found

Mend
Mend
•added 2025/06/22 10:00 p.m.•9 views

CVE-2025-6493

A weakness has been identified in CodeMirror up to 5.65.20. Affected is an unknown function of the file mode/markdown/markdown.js of the component Markdown Mode. This manipulation causes inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has bee...

6.9CVSS0.00535EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/06/22 10:00 p.m.•10 views

CVE-2025-6493 CodeMirror Markdown Mode markdown.js redos

A weakness has been identified in CodeMirror up to 5.65.20. Affected is an unknown function of the file mode/markdown/markdown.js of the component Markdown Mode. This manipulation causes inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has bee...

6.9CVSS5.6AI score0.00535EPSS
SaveExploits0References4
Mend
Mend
•added 2025/06/22 8:00 p.m.•4 views

CVE-2025-6492

A vulnerability has been found in MarkText up to 0.17.1 and classified as problematic. Affected by this vulnerability is the function getRecommendTitleFromMarkdownString of the file marktext/src/main/utils/index.js. The manipulation leads to inefficient regular expression complexity. The attack c...

6.9CVSS0.00531EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/06/22 8:00 p.m.•28 views

CVE-2025-6492 MarkText index.js getRecommendTitleFromMarkdownString redos

A vulnerability has been found in MarkText up to 0.17.1 and classified as problematic. Affected by this vulnerability is the function getRecommendTitleFromMarkdownString of the file marktext/src/main/utils/index.js. The manipulation leads to inefficient regular expression complexity. The attack c...

6.9CVSS0.00531EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/06/22 12:00 a.m.•12 views

PT-2025-26569 · Marktext · Marktext

Name of the Vulnerable Software and Affected Versions: MarkText versions up to 0.17.1 Description: A vulnerability has been found in MarkText, affecting the function getRecommendTitleFromMarkdownString of the file marktext/src/main/utils/index.js. The manipulation leads to inefficient regular...

6.9CVSS5.1AI score0.00531EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/22 12:00 a.m.•4 views

CVE-2025-6492: Inefficient Regular Expression Complexity

A vulnerability has been found in MarkText up to 0.17.1 and classified as problematic. Affected by this vulnerability is the function getRecommendTitleFromMarkdownString of the file marktext/src/main/utils/index.js. The manipulation leads to inefficient regular expression complexity. The attack c...

6.9CVSS5AI score0.00531EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/22 12:00 a.m.•5 views

CVE-2025-6493: Inefficient Regular Expression Complexity

A weakness has been identified in CodeMirror up to 5.65.20. Affected is an unknown function of the file mode/markdown/markdown.js of the component Markdown Mode. This manipulation causes inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has bee...

6.9CVSS5.1AI score0.00535EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/20 12:00 a.m.•6 views

CVE-2024-4025: Inefficient Regular Expression Complexity

A Denial of Service DoS condition has been discovered in GitLab CE/EE affecting all versions from 7.10 prior before 16.11.5, version 17.0 before 17.0.3, and 17.1 before 17.1.1. It is possible for an attacker to cause a denial of service using a crafted markdown page...

7.5CVSS5.6AI score0.00539EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/11 9:08 p.m.•20 views

CVE-2025-5897

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression...

7.5CVSS4.5AI score0.00618EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2025/06/09 9:30 p.m.•20 views

@vue/cli-plugin-pwa Regular Expression Denial of Service vulnerability

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression...

7.5CVSS4.7AI score0.00618EPSS
SaveExploits1References6Affected Software1
osv_ghsa
osv_ghsa
•added 2025/06/09 9:30 p.m.•22 views

GHSA-79VF-HF9F-J9Q8 @vue/cli-plugin-pwa Regular Expression Denial of Service vulnerability

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression...

5.3CVSS7.3AI score0.00618EPSS
SaveExploits1References6
Mend
Mend
•added 2025/06/09 8:31 p.m.•5 views

CVE-2025-5896

A vulnerability was found in tarojs taro up to 4.1.1. It has been declared as problematic. This vulnerability affects unknown code of the file taro/packages/css-to-react-native/src/index.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely...

7.5CVSS0.00622EPSS
SaveExploits1References9
CVE
CVE
•added 2025/06/09 8:31 p.m.•108 views

CVE-2025-5896

The CVE-2025-5896 entry concerns taro/taro (up to version 4.1.1). The vulnerability exists in taro/packages/css-to-react-native/src/index.js and arises from inefficient regular-expression handling (ReDoS-like behavior) in that code path. The issue can be triggered remotely and, per sources, upgra...

7.5CVSS4.8AI score0.00622EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2025/06/09 8:15 p.m.•32 views

CVE-2025-5895

A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataUri of the file frontend/src/metabase/lib/dom.js. The manipulation leads to inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit...

7.5CVSS0.0063EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/06/09 8:00 p.m.•16 views

CVE-2025-5895 Metabase dom.js parseDataUri redos

A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataUri of the file frontend/src/metabase/lib/dom.js. The manipulation leads to inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit...

5.3CVSS4.6AI score0.0063EPSS
SaveExploits1References6
Mend
Mend
•added 2025/06/09 8:00 p.m.•10 views

CVE-2025-5895

A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataUri of the file frontend/src/metabase/lib/dom.js. The manipulation leads to inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit...

7.5CVSS0.0063EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2025/06/09 7:31 p.m.•14 views

CVE-2025-5892 RocketChat parseMessage.js parseMessage redos

A vulnerability, which was classified as problematic, has been found in RocketChat up to 7.6.1. This issue affects the function parseMessage of the file /apps/meteor/app/irc/server/servers/RFC2813/parseMessage.js. The manipulation of the argument line leads to inefficient regular expression...

5.3CVSS7.2AI score0.00618EPSS
SaveExploits1References5
Mend
Mend
•added 2025/06/09 7:31 p.m.•9 views

CVE-2025-5892

A vulnerability, which was classified as problematic, has been found in RocketChat up to 7.6.1. This issue affects the function parseMessage of the file /apps/meteor/app/irc/server/servers/RFC2813/parseMessage.js. The manipulation of the argument line leads to inefficient regular expression...

7.5CVSS0.00618EPSS
SaveExploits1References7
CVE
CVE
•added 2025/06/09 7:31 p.m.•100 views

CVE-2025-5892

CVE-2025-5892 affects Rocket.Chat up to 7.6.1. The issue is in the parseMessage.js function (parseMessage) where manipulation of the line argument causes inefficient regular expression complexity, enabling a potential remote attack. Public exploit information is present in the sources. Remediatio...

7.5CVSS7.2AI score0.00618EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2025/06/09 7:15 p.m.•34 views

CVE-2025-5891

A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code of the file /lib/tools/Config.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to th...

5.3CVSS0.00657EPSS
SaveExploits1References5
Rows per page
Query Builder