155 matches found
Design/Logic Flaw
prism is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3777
nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3777
CVE-2021-3777: nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity (ReDoS). IBM X-Force lists CVSS v3.1 base score 7.5 (HIGH) with Network attack vector, no user interaction, and Availability impact. No remediation details are provided in the supplied documents.
CVE-2021-3794: Inefficient Regular Expression Complexity
vuelidate is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3795: Inefficient Regular Expression Complexity
semver-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3777: Inefficient Regular Expression Complexity
nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3801: Inefficient Regular Expression Complexity
prism is vulnerable to Inefficient Regular Expression Complexity...
Inefficient Regular Expression Complexity in daaku/nodejs-tmpl
✍️ Description It allows cause a denial of service when formatting crafted string. 🕵️♂️ Proof of Concept // PoC.js var tmpl = require"tmpl" forvar i = 1; i = 50000; i++ var time = Date.now; var attackstr = ""+"".repeati10000+"answer"; tmplattackstr, answer: 42 var timecost = Date.now - time;...
axios Inefficient Regular Expression Complexity vulnerability
axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
CVE-2021-3749 affects the Axios package used by IBM Cloud Pak System and Node.js environments. It is a Denial of Service vulnerability via a regular-expression DoS in the trim function, exploitable by crafted input to cause high CPU usage. Remediation is to upgrade to fixed software; IBM Cloud Pa...
CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749: Inefficient Regular Expression Complexity
axios is vulnerable to Inefficient Regular Expression Complexity...