UBUNTU-CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3828

CVE-2021-3828 affects the Python nltk package with a vulnerability to ReDoS (inefficient regular-expression handling). Connected sources show fixes in newer nltk releases (e.g., updates to 3.6.x/3.7, and OpenSUSE/SUSE advisories mentioning python-nltk fixes) and advisories noting the issue in Ubu...

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3820

inflect is vulnerable to Inefficient Regular Expression Complexity...

PT-2021-22006

Name of the Vulnerable Software and Affected Versions: inflect affected versions not specified Description: The issue concerns Inefficient Regular Expression Complexity. inflect is a customizable inflections library for nodejs. Recommendations: At the moment, there is no information about a newer...

CVE-2021-3828: Inefficient Regular Expression Complexity

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822: Inefficient Regular Expression Complexity

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3820: Inefficient Regular Expression Complexity

inflect is vulnerable to Inefficient Regular Expression Complexity...

Inefficient Regular Expression Complexity in trentm/python-markdown2

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in markdown2. The ReDoS vulnerability is mainly due to the sub-pattern with quantified overlapping adjacency and can be exploited with the following code. Proof of Concept // PoC.py import markdown2 from...

CVE-2021-39229

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin which just comes out of the box are subject to a denial of service attac...

CVE-2021-39229

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin which just comes out of the box are subject to a denial of service attac...

GHSA-JGRX-MGXX-JF9V tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion

nodejs-tmpl is simple string formatting. tmpl is vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion...

Inefficient Regular Expression Complexity in chalk/ansi-regex

ansi-regex is vulnerable to Inefficient Regular Expression Complexity which could lead to a denial of service when parsing invalid ANSI escape codes. Proof of Concept js import ansiRegex from 'ansi-regex'; forvar i = 1; i = 50000; i++ var time = Date.now; var attackstr = "\u001B"+";".repeati10000...

GHSA-49X3-8228-3W3M Inefficient Regular Expression Complexity in code-server

code-server is vulnerable to Inefficient Regular Expression Complexity...

Inefficient Regular Expression Complexity in code-server

code-server is vulnerable to Inefficient Regular Expression Complexity...

GHSA-468Q-V4JJ-485H Inefficient Regular Expression Complexity in taro

taro is vulnerable to Inefficient Regular Expression Complexity...

Inefficient Regular Expression Complexity in alvations/sacremoses

✍️ Description The sacremoses package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted text as input to the hasnumericonly function may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex...

Inefficient Regular Expression Complexity in josdejong/jsoneditor

✍️ Description The jsoneditor package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted element as input to the getInnerText function may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex...