6880 matches found
Inefficient Regular Expression Complexity in pksunkara/inflect
✍️ Description The inflect package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted tablename as input to the classify function may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex. 🕵️♂️...
Inefficient Regular Expression Complexity in mochajs/mocha
Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in mocha. It allows cause a denial of service when stripping crafted invalid function definition from strs. The ReDoS vulnerability is mainly due to the regex...
CVE-2021-3801
Insufficient Regular Expression Complexity in prismjs leads to a Regular Expression Denial of Service ReDoS attack. An unauthenticated attacker can exploit this flaw to cause an application to consume an excess amount of CPU by providing a crafted HTML comment as input. This can result in a denia...
Inefficient Regular Expression Complexity in validatorjs/validator.js
Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in validator. It allows cause a denial of service when validating crafted invalid MagnetURIs. The ReDoS vulnerability is mainly due to the sub-pattern .+&tr=.+ with quantified overlapping adjacency and c...
CVE-2021-3804
taro is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3807
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
DEBIAN-CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3810
code-server is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3804
taro is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3807
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
taro is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3804
taro is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3810
code-server is vulnerable to Inefficient Regular Expression Complexity...