Lucene search
+L

6 matches found

Veracode
Veracode
•added 2022/08/25 4:18 a.m.•33 views

Regular Expression Denial Of Service (ReDoS)

uri-template-lite is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the expandRe attribute in index.js, allowing an attacker to crash the application by providing a malicious input through the URI.expand method...

7.5CVSS4.8AI score0.00971EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/08/25 12:00 a.m.•66 views

GHSA-CHW2-6C7R-37P7 uri-template-lite Regular Expression Denial of Service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method...

5.9CVSS7.5AI score0.00971EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2022/08/25 12:00 a.m.•40 views

uri-template-lite Regular Expression Denial of Service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method...

7.5CVSS7.4AI score0.00971EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2022/08/24 3:48 p.m.•43 views

CVE-2021-43309 ReDoS in uri-template-lite URI.expand function

An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method...

5.9CVSS7.7AI score0.00971EPSS
SaveExploits1References2
Mend
Mend
•added 2022/08/24 3:48 p.m.•4 views

CVE-2021-43309

An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method...

8.2CVSS0.00971EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/24 12:00 a.m.•3 views

CVE-2021-43309: Inefficient Regular Expression Complexity

An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method...

7.5CVSS7.4AI score0.00971EPSS
SaveExploits1References3
Rows per page
Query Builder