8175 matches found
pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py
A flaw was found in Python Setuptools due to a regular expression Denial of Service ReDoS present in packageindex.py. This issue could allow a remote attacker to cause a denial of service via HTML in a crafted package or custom PackageIndex page...
CVE-2023-48223
fast-jwt provides fast JSON Web Token JWT implementation. Prior to version 3.3.2, the fast-jwt library does not properly prevent JWT algorithm confusion for all public key types. The 'publicKeyPemMatcher' in 'fast-jwt/src/crypto.js' does not properly match all common PEM formats for public keys. ...
Type confusion
fast-jwt provides fast JSON Web Token JWT implementation. Prior to version 3.3.2, the fast-jwt library does not properly prevent JWT algorithm confusion for all public key types. The 'publicKeyPemMatcher' in 'fast-jwt/src/crypto.js' does not properly match all common PEM formats for public keys. ...
CVE-2023-48223 fast-jwt JWT Algorithm Confusion
fast-jwt provides fast JSON Web Token JWT implementation. Prior to version 3.3.2, the fast-jwt library does not properly prevent JWT algorithm confusion for all public key types. The 'publicKeyPemMatcher' in 'fast-jwt/src/crypto.js' does not properly match all common PEM formats for public keys. ...
CVE-2023-48223 fast-jwt JWT Algorithm Confusion
fast-jwt provides fast JSON Web Token JWT implementation. Prior to version 3.3.2, the fast-jwt library does not properly prevent JWT algorithm confusion for all public key types. The 'publicKeyPemMatcher' in 'fast-jwt/src/crypto.js' does not properly match all common PEM formats for public keys. ...
GHSA-3F2Q-6294-FMQ5 Inefficient Regular Expression Complexity in git-urls
git-urls version 1.0.1 is vulnerable to ReDOS Regular Expression Denial of Service in Go package...
CVE-2023-46402
git-urls 1.0.0 allows ReDOS Regular Expression Denial of Service in urls.go...
CVE-2023-46402
git-urls 1.0.0 allows ReDOS Regular Expression Denial of Service in urls.go...
CVE-2023-46402
git-urls 1.0.0 allows ReDOS Regular Expression Denial of Service in urls.go...
git-urls Security Vulnerabilities
git-urls is a Go library from Will Maier's personal developer. It is used to parse Git URLs. A security vulnerability exists in git-urls version 1.0.1. An attacker could exploit this vulnerability to conduct a regular expression denial of service attack...
CVE-2023-26364 Denial of Service of regular expression in package @adobe/css-tools
@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS. Exploitation of this issue does not require user interaction or privileges...
CVE-2023-46402
git-urls 1.0.0 allows ReDOS Regular Expression Denial of Service in urls.go...
PT-2023-30003 · Git-Urls · Git-Urls
Name of the Vulnerable Software and Affected Versions: git-urls version 1.0.1 git-urls version 1.0.0 Description: The issue is related to ReDOS Regular Expression Denial of Service in the Go package. This can cause a denial of service in the urls.go file. Recommendations: For git-urls version...
Medium: ruby
Issue Overview: A flaw was found in ruby, where the date object was found to be vulnerable to a regular expression denial of service ReDoS during the parsing of dates. This flaw allows an attacker to hang a ruby application by providing a specially crafted date string. The highest threat to this...
libpcre Regular Expression DoS
The vulnerability of the libpcre component in the Regular Expression library PCRE is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Apigee API Security policies howto
The Genesis of Apigee API Security Guidelines In today's digital epoch, APIs Application Programming Interfaces" have ascended to be the fundamental infrastructure underpinning software development - furnishing the medium for diverse software systems to interact and exchange data. Yet, with this...
Markdown Marked Compiler DoS
The vulnerability of the compiler for processing Markdown marked text is related to incorrect handling of regular expressions. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2023-45806: Inefficient Regular Expression Complexity
Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the stable branch and version 3.2.0.beta3 of the beta and tests-passed branches, if a user has been quoted and uses a | in their full name, they might be able to trigger a bug that generates a lot of duplicat...
rubygem-rack: denial of service in Content-Disposition parsing
A flaw was found in rubygem-rack. Rack is vulnerable to a denial of service caused by a regular expression denial of service ReDoS flaw in the Rack::Utils.getbyteranges function. By sending a specially-crafted regex input, a remote attacker can cause a denial of service...
rubygem-rack: denial of service in Content-Disposition parsing
A flaw was found in rubygem-rack. Rack is vulnerable to a denial of service caused by a regular expression denial of service ReDoS flaw in the multipart parsing component. By sending a specially-crafted input, a remote attacker can cause a denial of service...