@appknit-project/appknit-internal-sdk (>=1.0.98-alpha.0, <=1.0.98-alpha.11), @appknit-project/appknit-platform-sdk-v2 (>=1.3.65-alpha.0, <=1.3.65-alpha.10) +97 more potentially affected by CVE-2024-21534 via jsonpath-plus (>=10.0.0, <=10.1.0)

jsonpath-plus NPM version =10.0.0, =1.0.98-alpha.0, =1.3.65-alpha.0, =0.18.0-alpha.0, =0.17.3, =0.18.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.12, =0.0.13 and more Source cves: CVE-2024-21534 Source advisory: SNYK:JS-JSONPATHPLUS-7945884...

01-numacert (>=1.0.0, <=3.0.0), 05day (1.0.0) +14344 more potentially affected by CVE-2024-45296 +1 more via path-to-regexp (>=0.0.2, <=0.1.8)

path-to-regexp NPM version =0.0.2, =1.0.0, =1.0.1, =1.0.3, =0.2.0, =1.0.2, =1.0.0, =2.0.0, =0.2.0, =0.2.0, =0.2.3 and more Source cves: CVE-2024-45296, CVE-2026-4867 Source advisory: OSV:GHSA-9WV6-86V2-598J...

path-to-regexp outputs backtracking regular expressions

Impact A bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period .. For example, /:a-:b. Patches For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0. These versions add backtrack protection...

360shitu (0.1.0), 3d-crystal-model (0.1.0) +8398 more potentially affected by CVE-2024-45296 +1 more via path-to-regexp (>=2.0.0, <=3.2.0)

path-to-regexp NPM version =2.0.0, =0.24.0, =1.0.0, =1.0.6, =0.0.0-canary.1, =0.0.1, =6.1.5, =1.1.17, =1.2.151 - @21epub/pro-layout 6.10.9 and more Source cves: CVE-2024-45296, CVE-2026-4867 Source advisory: OSV:GHSA-9WV6-86V2-598J...

07-cesar-router (0.0.2), 07-custom-router (>=0.0.1, <=0.0.4) +1543 more potentially affected by CVE-2024-45296 +1 more via path-to-regexp (>=4.0.3, <=6.2.2)

path-to-regexp NPM version =4.0.3, =0.0.1, =0.0.1, =0.0.1, =0.0.0, =0.0.1, =0.0.0, =0.0.1, =0.0.5, =0.0.1, =0.0.0-canary.0, =0.0.0-canary.6 and more Source cves: CVE-2024-45296, CVE-2026-4867 Source advisory: OSV:GHSA-9WV6-86V2-598J...

10chars-test (>=1.0.0, <=1.0.34), 20190403-utils (1.0.0) +1272 more potentially affected by CVE-2024-45296 +1 more via path-to-regexp (>=0.2.5, <=1.8.0)

path-to-regexp NPM version =0.2.5, =1.0.0, =4.0.61, =4.0.61, =4.0.61, =0.0.3, =0.0.1, =1.1.11, =2.0.0, =0.0.1, =1.0.0, =3.3.9-patch.1, =3.0.0-beta.5, =3.0.0, =4.0.0-alpha.1 and more Source cves: CVE-2024-45296, CVE-2026-4867 Source advisory: OSV:GHSA-9WV6-86V2-598J...

CVE-2024-6232

A regular expression denial of service ReDos vulnerability was found in Python's tarfile module. Due to excessive backtracking while tarfile parses headers, an attacker may be able to trigger a denial of service via a specially crafted tar archive. Mitigation Mitigation for this issue is either n...

DEBIAN-CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

AZL-48585 CVE-2024-6232 affecting package python3 for versions less than 3.9.19-5

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

UBUNTU-CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

CVE-2024-6232

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

CVE-2024-6232 Regular-expression DoS when parsing TarFile headers

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

CVE-2024-6232 Regular-expression DoS when parsing TarFile headers

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

CVE-2024-6232

CVE-2024-6232 affects CPython: tarfile.TarFile header parsing RegEx backtracking causes a ReDoS, with a base score of 7.5 (HIGH). Attack vector is NETWORK and requires no privileges or user interaction. Impact is listed as Availability impact being HIGH; Confidentiality/Integrity are NONE. The is...

PSF-2024-11

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

Regular Expression Denial Of Service (ReDoS)

urlregex is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to inefficient handling of regular expressions in the index.js file of the Backtracking component in nescalante urlregex, allowing an attacker to induce performance degradation or resource exhaustion...

PT-2024-7545

Name of the Vulnerable Software and Affected Versions CPython affected versions not specified Description The issue is related to regular expressions used in tarfile.TarFile header parsing, which can cause excessive backtracking and are vulnerable to ReDoS via specifically-crafted tar archives...