9961 matches found
PYSEC-2021-317
The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...
CVE-2021-23437
CVE-2021-23437 affects Pillow (Python Imaging Library): the getrgb function is vulnerable to a regular expression denial-of-service (ReDoS). Affected versions include 5.2.0 and earlier than 8.3.2. The issue can cause partial availability impact. The CVSS base score is 7.5 (HIGH) per NVD. Remediat...
CVE-2021-23437 Regular Expression Denial of Service (ReDoS)
The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...
CVE-2021-23437
The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...
Uncontrolled Resource Consumption in trim-off-newlines
All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service ReDoS via string processing...
GHSA-38FC-WPQX-33J7 Uncontrolled Resource Consumption in trim-off-newlines
All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service ReDoS via string processing...
Inefficient Regular Expression Complexity in nervjs/taro
āļø Description A ReDoS regular expression denial of service flaw was found in the @tarojs/helper package. An attacker that is able to provide crafted input as url may cause an application to consume an excessive amount of CPU. šµļøāāļø Proof of Concept Create the following poc.mjs // PoC.mjs import...
Inefficient Regular Expression Complexity in x-neuron/antdfront
āļø Description A ReDoS regular expression denial of service flaw was found in the antdFront package. An attacker that is able to provide crafted input to the isUrlinput function may cause an application to consume an excessive amount of CPU. šµļøāāļø Proof of Concept Create the following poc.mjs //...
Regular Expression Denial Of Service (ReDoS)
axios is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists in trim in utils.js due to inefficient regular expression complexity which allows an attacker to crash the application by submitting a malicious string as a header...
CVE-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client such as web browser connects to, could trigger a Regular Expression Denial of Service ReDOS during an authentication request with a specially crafted payload that is sen...
Pillow -- Regular Expression Denial of Service (ReDoS)
GitHub Advisory Database reports: Uncontrolled Resource Consumption in pillow. The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function. References: https://nvd.nist.gov/vuln/detail/CVE-2021-23437...
The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Centerās date center is related to deficiencies in the process of eliminating special elements from the output data used by the incoming component. This allows a perpetrator to execute arbitrary code.
The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to deficiencies in the process of eliminating special elements from the output data used by the incoming component. Exploiting this vulnerability allows a malicious actor to execute arbitrar...
UBUNTU-CVE-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client such as web browser connects to, could trigger a Regular Expression Denial of Service ReDOS during an authentication request with a specially crafted payload that is sen...
axios Inefficient Regular Expression Complexity vulnerability
axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity...
Inefficient Regular Expression Complexity in vuelidate/vuelidate
āļø Description A ReDoS regular expression denial of service flaw was found in the @vuelidate/validators package. An attacker that is able to provide crafted input to the urlinput function may cause an application to consume an excessive amount of CPU. šµļøāāļø Proof of Concept Create the following...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2021-26084 CVE-2021-26084 Remote Code Execution on Conflu...
CVE-2021-3749
A Regular Expression Denial of Service ReDoS vulnerability was found in the nodejs axios. This flaw allows an attacker to provide crafted input to the trim function, which might cause high resources consumption and as a consequence lead to denial of service. The highest threat from this...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2021-26084 CVE-2021-26084 - Confluence Pre-Auth RCE | O...
