Lucene search
K

4 matches found

Veracode
Veracode
added 2023/02/14 7:21 a.m.23 views

Regular Expression Denial Of Service (ReDoS)

sideway/formula is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists in index.js due to regular expression complexity which allows attacker to provide crafted strings to the formula's parser that might lead to polynomial execution time causing an application crash...

6.5CVSS6.3AI score0.01149EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/02/08 10:38 p.m.27 views

GHSA-C2JC-4FPR-4VHG @sideway/formula contains Regular Expression Denial of Service (ReDoS) Vulnerability

Impact User-provided strings to formula's parser might lead to polynomial execution time. Patches Users should upgrade to 3.0.1+. Workarounds None...

5.5CVSS6AI score0.01149EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2023/02/08 10:38 p.m.54 views

@sideway/formula contains Regular Expression Denial of Service (ReDoS) Vulnerability

Impact User-provided strings to formula's parser might lead to polynomial execution time. Patches Users should upgrade to 3.0.1+. Workarounds None...

6.5CVSS6.4AI score0.01149EPSS
Exploits0References4Affected Software1
Huntr
Huntr
added 2021/09/16 5:4 p.m.8 views

Inefficient Regular Expression Complexity in chocobozzz/peertube

Description Hello Again dear Peertube team. I found inefficient regular expression in that have a Polynomial execution time that can be lead to ReDoS attacks and it is better to replace it with another regex or Use google re2 regex engine for server sides code. Proof of Concept I create two...

0.2AI score
Exploits0
Rows per page
Query Builder