6887 matches found
Design/Logic Flaw
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3804
taro is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3810
code-server is vulnerable to Inefficient Regular Expression Complexity...
UBUNTU-CVE-2021-3807
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
UBUNTU-CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
code-server is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
Inefficient Regular Expression Complexity in isaacs/minimatch
Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in minimatch. It allows cause a denial of service when calling function braceExpand. The ReDoS vulnerability is mainly due to the regex /./ and can be exploited with the following code. Proof of Concept...
CVE-2021-3810 Inefficient Regular Expression Complexity in cdr/code-server
code-server is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3804
CVE-2021-3804 affects taro (NervJS/taro) with an Inefficient Regular Expression Complexity flaw. The vulnerability is reported as high impact (availability). The NVD/NVD-derived data cite network attack vector with low complexity and no authentication/interaction required. Several connected sourc...
taro 安全漏洞
Taro is an open cross-end, cross-framework solution. A security vulnerability exists in taro that stems from susceptibility to inefficient regular expression complexity...
PT-2021-21940 · Taro · Taro
Name of the Vulnerable Software and Affected Versions: taro affected versions not specified Description: The issue is related to Inefficient Regular Expression Complexity. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents...
Python 资源管理错误漏洞
Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A resource management error vulnerability exists in the AbstractBasicAuthHandler class of python urllib, which ste...
CVE-2021-3807 Inefficient Regular Expression Complexity in chalk/ansi-regex
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803 Inefficient Regular Expression Complexity in fb55/nth-check
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3807
CVE-2021-3807 affects ansi-regex, enabling Regular Expression Denial of Service (ReDoS) with high impact (CVSS v3.1 base 7.5). Connected docs confirm DoS in Jira Data Center/Server and Jira Service Management, with fixed versions including Jira DC/Server 10.3.16+ and 11.2.1+. Remediation is to up...
CVE-2021-3803
CVE-2021-3803 is linked to nth-check’s Inefficient Regular Expression Complexity. IBM security bulletin for IBM watsonx Orchestrate Developer Edition (1.4.0–1.14.0) lists this CVE and states the remediation is to upgrade to Release 1.15.0. The core issue is the nth-check regex complexity; no expl...