PT-2025-44804

Name of the Vulnerable Software and Affected Versions Mantis Bug Tracker versions 2.27.1 and below Description Mantis Bug Tracker is an open source issue tracker. When a user modifies their profile to update their email address, the system saves the change without verifying ownership. This can le...

EUVD-2021-28056

Malicious code in bioql PyPI...

EUVD-2022-1191

Malicious code in bioql PyPI...

Security Bulletin: A vulnerability in Python may affect IBM Robotic Process Automation for Cloud Pak and result in an attacker sending invalid emails. (CVE-2023-27043).

Summary There is a vulnerability in Python used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP. An attacker could exploit this vulnerability to send messages from e-mail addresses that would otherwise be rejected. CVE-2020-23064. This bulletin identifies the security fixes ...

regexfn denial of service vulnerability

regexfn is a function that can be used for generic RegEx validation. regexfn version v1.0.5 contains a denial of service vulnerability that stems from not doing the right thing when validating crafted invalid emails, which could be exploited by an attacker to cause an application denial of servic...

CVE-2021-40901

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails...

CVE-2021-40900

A Regular Expression Denial of Service ReDOS vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails...

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails...

Denial of service

A Regular Expression Denial of Service ReDOS vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails...

CVE-2021-40896

A Regular Expression Denial of Service ReDOS vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails...

CVE-2021-40896

A Regular Expression Denial of Service ReDOS vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails...

CVE-2021-40896

A Regular Expression Denial of Service ReDOS vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails...

PT-2022-11324 · Unknown · That-Value

Name of the Vulnerable Software and Affected Versions: that-value version 0.1.3 Description: A Regular Expression Denial of Service ReDOS vulnerability was discovered in that-value when validating crafted invalid emails. Recommendations: For that-value version 0.1.3, update to a version that fixe...

scniro-validator 安全漏洞

scniro-validator is a small, dependency-free email validator. scniro-validator version v1.0.1 contains a denial of service vulnerability that stems from a failure to properly handle crafted invalid emails when validating them, which could be exploited by an attacker to cause a denial of service o...

PT-2022-11328 · Regexfn · Regexfn

Name of the Vulnerable Software and Affected Versions: regexfn version 1.0.5 Description: A Regular Expression Denial of Service ReDOS issue was found in the validation of crafted invalid emails. Recommendations: For regexfn version 1.0.5, consider updating to a newer version that addresses this...

GHSA-V6WH-2WVH-C8X5 Regular Expression Denial of Service in djvalidator

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service ReDoS by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!...

Regular Expression Denial of Service in djvalidator

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service ReDoS by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!...

Regular expression denial of service in @absolunet/kafe

This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails...

GHSA-HGPF-97C5-74FC Regular expression denial of service in @absolunet/kafe

This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails...

CVE-2020-7779

All versions of package djvalidator are vulnerable to Regular Expression Denial of Service ReDoS by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!...