Lucene search
K

17 matches found

Veracode
Veracode
added 2023/04/04 2:2 p.m.26 views

Regular Expression Denial Of Service (ReDoS)

uri is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists due to the insecure Regex pattern used for the RFC3986URI and RFC3986relativeref parameters in the rfc3986parser.rb, which allows an attacker to crash the application by providing maliciously crafted URI...

5.3CVSS7.3AI score0.02637EPSS
Exploits0References26Affected Software5
Veracode
Veracode
added 2023/04/04 2:2 p.m.25 views

Regular Expression Denial Of Service (ReDoS)

time is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists due to the insecure Regex pattern used in the rfc2822 function of time.rb, which allows an attacker to crash the application by providing an invalid time...

5.3CVSS7.3AI score0.02452EPSS
Exploits0References22Affected Software5
Veracode
Veracode
added 2023/02/17 2:40 a.m.30 views

Regular Expression Denial Of Service (ReDoS)

undici is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists due to an insecure Regex pattern used in the headerValueNormalize function in headers.js, which allows an attacker to crash the application by providing a malicious input...

7.5CVSS7.3AI score0.01315EPSS
Exploits0References5Affected Software2
Veracode
Veracode
added 2023/02/15 2:2 a.m.16 views

Regular Expression Denial Of Service (ReDoS)

simple-markdown is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists due to an insecure Regex pattern used for the match attribute in the autolink object in simple-markdown.js, which allows an attacker to crash the application by providing a maliciously crafted...

7.5CVSS7.1AI score0.01097EPSS
Exploits1References6Affected Software1
Veracode
Veracode
added 2023/01/25 3:43 a.m.55 views

Regular Expression Denial Of Service (ReDoS)

ua-parser-js is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists due to an insecure Regex pattern used for the str attribute in the trim function of ua-parser.js, which allows an attacker to crash the application by providing a maliciously crafted string...

7.5CVSS7.3AI score0.01725EPSS
Exploits2References2Affected Software2
Veracode
Veracode
added 2023/01/11 4:24 a.m.24 views

Regular Expression Denial Of Service (ReDoS)

terminal-kit is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used in multiple functions of the library, allowing an attacker to crash the application by providing a malicious strings such as '^'.repeatbigNumber...

7.5CVSS3.9AI score0.00938EPSS
Exploits0References5Affected Software1
Veracode
Veracode
added 2022/12/23 8:31 a.m.75 views

Regular Expression Denial Of Service (ReDoS)

setuptools is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the REL attribute in the findexternallinks function of packageindex.py, allowing an attacker to crash the application by passing a malicious HTML...

5.9CVSS6AI score0.02617EPSS
Exploits1References13Affected Software3
Veracode
Veracode
added 2022/12/23 5:51 a.m.69 views

Regular Expression Denial Of Service (ReDoS)

isjs is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for url matching in is.js allowing an attacker to crash the application by providing malicious urls...

7.5CVSS7.2AI score0.00866EPSS
Exploits1References3Affected Software2
Veracode
Veracode
added 2022/12/15 2:4 a.m.31 views

Regular Expression Denial Of Service (ReDoS)

rails-html-sanitizer is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the attrnode.value attribute in the scrubattributes function of scrubbers.rb, allowing an attacker to crash the application by providing malicious SVG...

7.5CVSS7.3AI score0.01454EPSS
Exploits0References7Affected Software3
Veracode
Veracode
added 2022/12/14 6:23 a.m.44 views

Regular Expression Denial Of Service (ReDoS)

loofah is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the attrnode.value attribute in the scrubattributes function of scrub.rb, allowing an attacker to crash the application by providing malicious SVG attributes...

7.5CVSS7.3AI score0.01686EPSS
Exploits0References6Affected Software3
Veracode
Veracode
added 2022/08/25 4:18 a.m.26 views

Regular Expression Denial Of Service (ReDoS)

uri-template-lite is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the expandRe attribute in index.js, allowing an attacker to crash the application by providing a malicious input through the URI.expand method...

7.5CVSS4.8AI score0.00856EPSS
Exploits1References4Affected Software1
Veracode
Veracode
added 2022/08/23 3:38 a.m.22 views

Regular Expression Denial Of Service (ReDoS)

eth-account is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the TYPEREGEX attribute in the validatetypesattribute function of validation.py, allowing an attacker to crash the application by providing a malicious input...

7.5CVSS7.1AI score0.0078EPSS
Exploits1References4Affected Software1
Veracode
Veracode
added 2022/07/14 2:58 a.m.21 views

Regular Expression Denial Of Service (ReDoS)

tapestry-http is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the PATTERN attribute in the ContentType function of ContentType.java, allowing an attacker to cause an application crash through the maliciously crafted conten...

7.5CVSS7.1AI score0.01727EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2022/07/04 4:24 a.m.61 views

Regular Expression Denial Of Service (ReDoS)

scss-tokenizer is vulnerable to regular expression denial of service. The vulnerability exists in the loadAnnotation function of previous-map.js due to the insecure regex pattern used in the match attribute, allowing an attacker to crash the application by providing malicious input...

7.5CVSS7.3AI score0.01503EPSS
Exploits1References1Affected Software1
Veracode
Veracode
added 2022/06/28 4:20 a.m.29 views

Regular Expression Denial Of Service (ReDoS)

repo-git-downloader is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for match repository urls in the getOptions function of option.js, allowing an attacker to crash the application by downloading maliciously crafted git...

7.5CVSS3.6AI score0.01094EPSS
Exploits1References2Affected Software1
Veracode
Veracode
added 2022/06/03 5:29 a.m.24 views

Regular Expression Denial Of Service (ReDoS)

markdown-link-extractor is vulnerable to regular expression denial of service. An attacker can crash the application by providing malicious input to the module.exports function of index.js due to the insecure regex pattern used for the image parameter...

7.5CVSS3.9AI score0.01027EPSS
Exploits1References3Affected Software1
Veracode
Veracode
added 2022/06/03 4:58 a.m.24 views

Regular Expression Denial Of Service (ReDoS)

devcert is vulnerable to regular expression denial of service. An attacker can crash the application by providing a malicious input to the certificateFor function of index.ts due to the insecure regex pattern used for VALIDIP and VALIDDOMAIN parameters...

7.5CVSS7.2AI score0.006EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder