1486 matches found
UBUNTU-CVE-2021-3828
nltk is vulnerable to Inefficient Regular Expression Complexity...
PYSEC-2021-356
nltk is vulnerable to Inefficient Regular Expression Complexity...
Inflect 安全漏洞
Inflect is a custom variation of Nodejs. A security vulnerability exists in Inflect that stems from an error in the regular expressions used in the product. An attacker could use this vulnerability to cause a denial of service...
Nltk 代码问题漏洞
Nltk is a natural language toolkit. It is used to support research and development in natural language processing. A code issue vulnerability exists in nltk that stems from an error in certain regular expressions in the product. An attacker could cause a denial of service via this vulnerability...
sqlparse 资源管理错误漏洞
sqlparse is Python's non-validating SQL parser. It provides support for parsing, splitting and formatting SQL statements. A resource management error vulnerability in sqlparse versions 0.4.0 and 0.4.1 allows attackers to conduct ReDoS Regular Expression Denial of Service attacks...
nth-check 安全漏洞
Nth-Check is used to parse and compile CSS nth-checks into highly optimized functions. A security vulnerability exists in nth-check that stems from vulnerability to the complexity of inefficient regular expressions...
UBUNTU-CVE-2021-3801
prism is vulnerable to Inefficient Regular Expression Complexity...
Huawei EulerOS: Security Advisory for python-pygments (EulerOS-SA-2021-2441)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Prism 安全漏洞
Prism is an application from the US-based individual developers of Prism. It is a lightweight, extensible syntax highlighting tool. Prism suffers from a security vulnerability that stems from Prism's susceptibility to inefficient regular expression complexity...
EulerOS 2.0 SP2 : python-pygments (EulerOS-SA-2021-2441)
According to the versions of the python-pygments package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regula...
CVE-2021-32832
Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3, 3.12.2, and 3.13...
CVE-2021-32832
Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3, 3.12.2, and 3.13...
Rocket.Chat 资源管理错误漏洞
Rocket.Chat is an open source team chat software. A resource management error vulnerability exists in Rocket.Chat, which stems from an issue with certain regular expressions that could result in a denial of service. The following products and versions are affected: Rocket.Chat before versions...
Fedora: Security Advisory for rust-sd (FEDORA-2021-0f82e9d6d5)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
GitLab: ReDoS in syntax highlighting due to Rouge
Summary Gitlab is using the ruby gem "rouge" which has a ReDoS vulnerability. In rouge, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have cubic worst-case complexity and are vulnerable to Regular Expression Denial of Service...
perl: heap-based buffer overflow in regular expression compiler leads to DoS
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...
perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS
Perl before 5.30.3 has an integer overflow related to mishandling of a "PLregkindOPn == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection...
chatwoot has an unspecified vulnerability
chatwoot is an application. Customer Engagement Suite, an open source alternative to intercom, Zendesk, Salesforce Service Cloud, etc. chatwoot suffers from a security vulnerability that stems from chatwoot's vulnerability to the complexity of inefficient regular expressions. No details of the...
The vulnerability of the Pygments syntax highlighting program lies in its uncontrolled resource consumption, which allows a hacker to trigger a service failure.
The vulnerability of the Pygments syntax highlighter program is related to the use of regular expressions. Exploiting this vulnerability could allow a malicious actor to cause a service failure...