386 matches found
Inefficient Regular Expression Complexity in validator.js
validator.js prior to 13.7.0 is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3765
validator.js is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3765
validator.js is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3765
CVE-2021-3765 (validator.js) is described in the provided materials as a regular expression denial of service (ReDoS) vulnerability. The technical detail mentioned is a vulnerability in validator.js related to inefficient regular expression complexity, specifically a ReDoS condition triggered by ...
CVE-2021-3765
Removed by vendor...
CVE-2021-3765: Inefficient Regular Expression Complexity
validator.js is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
Zulip is an open source team chat server. In affected versions Zulip allows organization administrators on a server to configure "linkifiers" that automatically create links from messages that users send, detected via arbitrary regular expressions. Malicious organization administrators could...
Zulip server 安全漏洞
Zulip server is an open source team chat application from Zulip, Inc. in the United States. Zulip server has a security vulnerability that allows administrators of malicious organizations to subject the server to a denial of service via a regular expression complexity attack...
CVE-2021-3822
jsoneditor is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3828
nltk is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3828
nltk is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3820
inflect is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3828
nltk is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
jsoneditor is vulnerable to Inefficient Regular Expression Complexity...
PYSEC-2021-356
nltk is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3822
The CVE-2021-3822 entry concerns jsoneditor (josdejong/jsoneditor), where the getInnerText function uses an inefficient regex for trimmedValue, creating potential Regular Expression Denial of Service (ReDoS). Multiple connected sources corroborate a ReDoS risk affecting jsoneditor, with reference...
CVE-2021-3820
CVE-2021-3820 affects the npm package inflect. The vulnerability is a result of inefficient regular expressions (ReDoS) in the table_name input to the classify function, enabling an attacker to cause excessive CPU usage and potential denial of service. A PoC snippet demonstrates escalating CPU co...
CVE-2021-3822: Inefficient Regular Expression Complexity
jsoneditor is vulnerable to Inefficient Regular Expression Complexity...