PT-2022-11326 · Unknown · Scaffold-Helper

Name of the Vulnerable Software and Affected Versions: scaffold-helper version 1.2.0 Description: A Regular Expression Denial of Service ReDOS issue was found in scaffold-helper when copying crafted invalid files. This occurs due to inefficient regular expression handling, which can lead to...

PT-2022-11325 · Unknown · Split-Html-To-Chars

Name of the Vulnerable Software and Affected Versions: split-html-to-chars version 1.0.5 Description: A Regular Expression Denial of Service ReDOS issue was found in the software when it processes crafted invalid HTML. This occurs due to inefficient regular expression patterns that can lead to...

regexfn 安全漏洞

regexfn is a function that can be used for generic RegEx validation. regexfn version v1.0.5 contains a denial of service vulnerability that stems from not doing the right thing when validating crafted invalid emails, which could be exploited by an attacker to cause an application denial of servic...

PT-2022-11324 · Unknown · That-Value

Name of the Vulnerable Software and Affected Versions: that-value version 0.1.3 Description: A Regular Expression Denial of Service ReDOS vulnerability was discovered in that-value when validating crafted invalid emails. Recommendations: For that-value version 0.1.3, update to a version that fixe...

CVE-2021-40894

A Regular Expression Denial of Service ReDOS vulnerability was discovered in underscore-99xp v1.7.2 when the deepValueSearch function is called...

CVE-2021-40894

A Regular Expression Denial of Service ReDOS vulnerability was discovered in underscore-99xp v1.7.2 when the deepValueSearch function is called...

CVE-2021-40894

A Regular Expression Denial of Service ReDOS vulnerability was discovered in underscore-99xp v1.7.2 when the deepValueSearch function is called...

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in underscore-99xp v1.7.2 when the deepValueSearch function is called...

CVE-2021-40894

A Regular Expression Denial of Service ReDOS vulnerability was discovered in underscore-99xp v1.7.2 when the deepValueSearch function is called...

CVE-2021-40894

CVE-2021-40894 affects underscore-99xp v1.7.2, where the deepValueSearch function can trigger a Regular Expression Denial of Service (ReDOS). Multiple sources (CNVD, NVD, Veracode, CNVD Chinese entry) describe a vulnerability in the deepValueSearch path that could lead to denial of service. The i...

CVE-2021-40893

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails...

CVE-2021-40893

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails...

CVE-2021-40893

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails...

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails...

CVE-2021-40893

CVE-2021-40893 describes a ReDOS vulnerability in the Node.js library validate-data v0.1.1 triggered while validating crafted invalid emails. Root cause: improper handling during email validation leads to excessive backtracking. Impact: potential Denial of Service. Affected component: validate-da...

CVE-2021-40892

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgba strings...

CVE-2021-40892

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgba strings...

CVE-2021-40892

A Regular Expression Denial of Service ReDOS vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgba strings...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

POC - Atlassian Confluence OGNL Injection Remote Code Executio...

GHSA-W24X-87MR-4R23 SpEL Injection in Spring Data MongoDB

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...