[SECURITY] Fedora 45 Update: ocaml-re-1.14.0-7.fc45

A pure OCaml regular expression library. Supports Perl-style regular expressions, Posix extended regular expressions, Emacs-style regular expressions, and shell-style file globbing. It is also possible to build regular expressions by combining simpler regular expressions. There is also a subset o...

CVE-2019-19203

CVE-2019-19203 تم اكتشاف مشكلة في Oniguruma 6.x قبل الإصدار 6.9.4rc2. في الدالة gb18030mbcenclen في الملف gb18030.c، يتم إلغاء الإشارة إلى مؤشر UChar دون التحقق من تجاوزه نهاية السلسلة المطابقة. يؤدي هذا إلى قراءة خارج حدود الذاكرة في الكومة heap-based buffer over-read. الباحث: ManhND من فريق The...

CVE-2019-19204

CVE-2019-19204 تم اكتشاف مشكلة في Oniguruma 6.x قبل الإصدار 6.9.4rc2. في الدالة fetchintervalquantifier المعروفة سابقًا باسم fetchrangequantifier في ملف regparse.c، يتم استدعاء PFETCH دون التحقق من PEND. يؤدي هذا إلى قراءة تتجاوز حدود المخزن المؤقت في الكومة heap-based buffer over-read. الباحث:...

UBUNTU-CVE-2026-51302

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

ROOT-APP-GOBINARY-CVE-2025-29786 CVE-2025-29786 in rootio-github.com/expr-lang/expr - Patched by Root

Root has patched CVE-2025-29786 in the rootio-github.com/expr-lang/expr package for Root:Go. Multiple fixed versions available...

Splunk Enterprise 9.3.0 < 9.3.12, 9.4.0 < 9.4.11, 10.0.0 < 10.0.6, 10.2 < 10.2.3 (SVD-2026-0505)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0505 advisory. - Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr,...

The vulnerability of the expr-lang/expr dynamic expression library in the GO programming language, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the expr-lang/expr library in the GO programming language is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-35458 Gotenberg has a ReDoS via extraHttpHeaders scope feature

Gotenberg is an API for converting document formats. In 8.29.1 and earlier, Gotenberg uses dlclark/regexp2 to compile user-supplied scope patterns without setting a proper timeout. Users with access to features using this logic can hang workers indefinitely...

Denial Of Service (DoS)

github.com/expr-lang/expr is vulnerable to denial of service DoS. The vulnerability is due to missing recursion depth limits in certain builtin functions, which allows an attacker to supply deeply nested or cyclic data structures and trigger infinite recursion leading to stack overflow and...

MiracleLinux 7 : pcre-8.32-15.el7.1 (AXSA:2016-391:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-391:01 advisory. Perl-compatible regular expression library. PCRE has its own native API, but a set of wrapper functions that are based on the POSIX API are also...

Important: amazon-cloudwatch-agent

Issue Overview: SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. CVE-2025-47914 SSH servers parsing GSSAPI authentication requests do not validate the number...

CVE-2025-68156

A flaw was found in Expr, an expression language and expression evaluation for Go. This vulnerability allows a denial of service DoS via recursive traversal over user-provided deeply nested or cyclic data structures without enforcing a maximum recursion depth, leading to a stack overflow panic an...

[SECURITY] Fedora 43 Update: rust-regex-1.12.2-1.fc43

An implementation of regular expressions for Rust. This implementation uses finite automata and guarantees linear time matching on all inputs...

The vulnerability of the PCRE2 regular expression library, related to reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the PCRE2 regular expression library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

DEBIAN-CVE-2025-58050

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the scs:... Scan SubString verb when combined with...

PYSEC-2025-259

The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerability exists in the PCRE2 regular expression matching engine, specifically within the handling of the scs:... Scan SubString verb when combined with...

The vulnerability of the libpcre component in the Regular Expression library PCRE allows a attacker to cause a service failure.

The vulnerability of the libpcre component in the Regular Expression library PCRE is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

SUSE CVE-2005-4872

Perl-Compatible Regular Expression PCRE library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service crash via a regular expression with a large number of named subpatterns, which triggers a buffer...

SUSE CVE-2017-8399

PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2match.c, related to a "pattern with very many captures."...

USN-5627-2: PCRE vulnerabilities

USN-5627-1 fixed several vulnerabilities in PCRE. This update provides the corresponding fixes for Ubuntu 18.04 ESM. Original advisory details: It was discovered that PCRE incorrectly handled memory when handling certain regular expressions. An attacker could possibly use this issue to cause...