CVE-2019-19204

CVE-2019-19204 An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read. Researcher: ManhND of The Tarantula Team,...

CVE-2026-62864: ring-clojure ring: Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack

Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack. Prior to 1.15.5, wrap-nested-params in the ring.middleware.nested-params namespace uses a backtracking regular expression to match parameter names from URL query strings and HTTP request bodies. An attacker can...

PT-2026-133520

Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding chunked request bodies. A chunk-size line is matched as a run of hex digits, then . and a CRLF. A run followed by a bare LF and then a CRLF can never match, and the engine retrie...

RHEL 8 : pcre2 (RHSA-2026:92901)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92901 advisory. The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern...

CVE-2026-118779

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode, lib/pem.js, missing END line to process the relevant input or security decision. node-forge used polynomial-time regular expressions in...

Important: Red Hat Security Advisory: pcre2 security update

An update for pcre2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

Important: Red Hat Security Advisory: pcre2 security update

An update for pcre2 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

WifiPass

WifiPass Dump the saved wifi passwords for windows using regular expressions and python 3...

GitPython: GitPython: Denial of Service via regular expression backtracking in date parsing

A flaw was found in GitPython. A remote attacker can trigger a Denial of Service DoS by providing a malicious repository containing commit or tag objects with long, space-filled lines lacking a valid timestamp or timezone. When parsing these lines, the regular expression pattern triggers quadrati...

CVE-2026-117500

A flaw was found in HTTP::Body. A remote attacker could cause a Denial of Service DoS by submitting a specially crafted multipart upload request with a malformed filename. Inefficient regular expression processing causes excessive backtracking when parsing the filename, which exhausts CPU resourc...

CVE-2026-118779

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode, lib/pem.js, missing END line to process the relevant input or security decision. node-forge used polynomial-time regular expressions in...

CVE-2026-118779 Forge: Regular expression denial of service in PEM decoding (pem.decode)

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode, lib/pem.js, missing END line to process the relevant input or security decision. node-forge used polynomial-time regular expressions in...

CVE-2026-118779

The Forge (also known as node-forge ) JavaScript library, a native implementation of Transport Layer Security, is vulnerable to a Regular Expression Denial of Service (ReDoS) in versions prior to 1.4.1 . The root cause is the use of polynomial-time regular expressions within the pem.decode() func...

CVE-2026-118779 Forge: Regular expression denial of service in PEM decoding (pem.decode)

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode, lib/pem.js, missing END line to process the relevant input or security decision. node-forge used polynomial-time regular expressions in...

CVE-2026-118779 Forge: Regular expression denial of service in PEM decoding (pem.decode)

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode, lib/pem.js, missing END line to process the relevant input or security decision. node-forge used polynomial-time regular expressions in...

CVE-2026-118779

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode, lib/pem.js, missing END line to process the relevant input or security decision. node-forge used polynomial-time regular expressions in...

CVE-2026-116795

A flaw was found in re2js. When lookbehind assertions are enabled, repeated regular expression matching can cause the engine to repeatedly rescan input text from the beginning, leading to quadratic processing time. A remote attacker could supply crafted input to monopolize worker thread resources...

CVE-2026-116285

A flaw was found in HTTP::Body. A remote attacker can cause a Denial of Service DoS through excessive CPU consumption by submitting specially crafted chunked HTTP requests. This issue occurs due to quadratic regular expression backtracking when the parser processes malformed chunk-size lines...

CVE-2026-42533

NGINX Vulnerability Checker Script to non-intrusively check if an NGINX installation could be affected by vulnerability CVE-2026-42533. Important: This project does not exploit the vulnerability. It only performs local checks on the installed version and server configuration to identify potential...

CVE-2019-19012

CVE-2019-19012 An integer overflow in the searchinrange function in regexec.c in Oniguruma 6.x before 6.9.4rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. This only affects the 32-bit compiled version. Remote attackers can cause a...