3724 matches found
Regular Expression Denial Of Service (ReDoS)
repo-git-downloader is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for match repository urls in the getOptions function of option.js, allowing an attacker to crash the application by downloading maliciously crafted git...
Regular Expression Denial Of Service (ReDoS)
underscore-99xp is vulnerable to regular expression denial of service ReDoS attacks. A remote attacker is able to cause denial of service conditions via calling the vulnerable deepValueSearch function...
Regular Expression Denial Of Service (ReDoS)
validate-color is vulnerable to regular expression denial of service ReDoS attacks. A remote attacker is able to cause denial of service conditions via injecting crafted invalid rgba strings through validateHTMLColorRgb function...
CVE-2021-40900
A Regular Expression Denial of Service ReDOS vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails...
Denial of service
A Regular Expression Denial of Service ReDOS vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails...
Denial of service
A Regular Expression Denial of Service ReDOS vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails...
CVE-2021-40901
A Regular Expression Denial of Service ReDOS vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails...
CVE-2021-40901
CVE-2021-40901 affects scniro-validator v1.0.1 and is described as a Regular Expression Denial of Service (ReDoS) vulnerability triggered when validating crafted invalid emails. The root cause is a faulty/overly backtracking-prone regex in the email validation path, which can cause high CPU usage...
CVE-2021-40900
CVE-2021-40900 affects regexfn v1.0.5, where the isEmail validation can be abused by crafted invalid emails to trigger a ReDoS. Root cause: the regex handling allows excessive processing under certain inputs. Impact: potential application denial of service; CVSSv3.1 base score 7.5 (HIGH), network...
CVE-2021-40900
A Regular Expression Denial of Service ReDOS vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails...
CVE-2021-40899
A Regular Expression Denial of Service ReDOS vulnerability was discovered in repo-git-downloader v0.1.1 when downloading crafted invalid git repositories...
CVE-2021-40898
A Regular Expression Denial of Service ReDOS vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files...
Denial of service
A Regular Expression Denial of Service ReDOS vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files...
CVE-2021-40899
A Regular Expression Denial of Service ReDOS vulnerability was discovered in repo-git-downloader v0.1.1 when downloading crafted invalid git repositories...
CVE-2021-40899
CVE-2021-40899 : A ReDOS (Regular Expression Denial of Service) vulnerability exists in the open-source tool repo-git-downloader v0.1.1 when downloading crafted invalid Git repositories. The issue stems from improper regular expressions used in the code path handling repository URLs, enabling att...
CVE-2021-40898
CVE-2021-40898 affects scaffold-helper v1.2.0, where copying crafted invalid files triggers a Regular Expression Denial of Service (ReDoS). The issue stems from inefficient/insufficient checks in the regex paths used by getProcessedPath or getDynamicFilename during copy operations, enabling poten...
CVE-2021-40896
A Regular Expression Denial of Service ReDOS vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails...
CVE-2021-40897
A Regular Expression Denial of Service ReDOS vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls...