306 matches found
Regular Expression Denial Of Service (ReDoS)
@modelcontextprotocol/sdk is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to inefficiently constructed regular expressions with nested quantifiers in the UriTemplate class, which allows an attacker to supply a crafted URI that triggers catastrophic backtracki...
CVE-2019-20871
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown library allows catastrophic backtracking...
PT-2026-28656
Name of the Vulnerable Software and Affected Versions path-to-regexp versions prior to 0.1.13 Description A flawed regular expression is generated when three or more parameters are present within a single segment, separated by characters other than a period .. For example, /:a-:b-:c or...
GHSA-VQPR-J7V3-HQW9 Valibot has a ReDoS vulnerability in `EMOJI_REGEX`
Summary The EMOJIREGEX used in the emoji action is vulnerable to a Regular Expression Denial of Service ReDoS attack. A short, maliciously crafted string e.g., 100 characters can cause the regex engine to consume excessive CPU time minutes, leading to a Denial of Service DoS for the application...
EUVD-2021-26289
Malware in sbrugna...
EUVD-2021-26273
Malware in sbrugna...
EUVD-2021-0456
Malware in sbrugna...
EUVD-2019-0324
Malware in sbrugna...
EUVD-2018-0040
Malware in sbrugna...
EUVD-2021-0175
Malware in sbrugna...
EUVD-2018-11713
Malware in sbrugna...
EUVD-2021-20266
Malware in sbrugna...
EUVD-2023-28102
Malicious code in bioql PyPI...
EUVD-2025-22540
Malicious code in bioql PyPI...
EUVD-2023-0833
Malicious code in bioql PyPI...
EUVD-2025-16191
Malicious code in bioql PyPI...
EUVD-2022-0155
Malicious code in bioql PyPI...
EUVD-2024-48501
Malicious code in bioql PyPI...