9794 matches found
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3804
taro is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3807
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3810
code-server is vulnerable to Inefficient Regular Expression Complexity...
DEBIAN-CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
taro is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3804
taro is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3810
code-server is vulnerable to Inefficient Regular Expression Complexity...
UBUNTU-CVE-2021-3807
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
UBUNTU-CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
code-server is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
Inefficient Regular Expression Complexity in isaacs/minimatch
Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in minimatch. It allows cause a denial of service when calling function braceExpand. The ReDoS vulnerability is mainly due to the regex /./ and can be exploited with the following code. Proof of Concept...
CVE-2021-3810 Inefficient Regular Expression Complexity in cdr/code-server
code-server is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3804
CVE-2021-3804 affects taro (NervJS/taro) with an Inefficient Regular Expression Complexity flaw. The vulnerability is reported as high impact (availability). The NVD/NVD-derived data cite network attack vector with low complexity and no authentication/interaction required. Several connected sourc...