Lucene search
+L

450 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2025/05/30 5:00 p.m.•19 views

Security Bulletin: IBM App Connect Enterprise is vulnerable to Inefficient Regular Expression Complexity due to Babel ( CVE-2025-27789 )

Summary IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise Runtime are vulnerable to Inefficient Regular Expression Complexity due to Babel. Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. When using...

6.2CVSS6.8AI score0.00563EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:09 p.m.•13 views

CVE-2021-3820

inflect is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.7AI score0.01222EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 6:43 p.m.•17 views

CVE-2021-3804

taro is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS6.8AI score0.01262EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:35 p.m.•17 views

CVE-2020-36661

A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function isheader of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to version 0.5.9-1 is able to address this...

7.5CVSS6.9AI score0.0092EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 10:38 a.m.•21 views

CVE-2019-25103

A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file simple-markdown.js. The manipulation leads to inefficient regular expression complexity. The attack can be launched remotely. Upgrading to...

7.5CVSS6.9AI score0.0094EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:26 a.m.•15 views

CVE-2018-25074

A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validators/base.js. The manipulation of the argument uri leads to inefficient regular expression complexity. The patch is named...

7.5CVSS6.9AI score0.00918EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:56 a.m.•14 views

CVE-2017-20162

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has...

5.3CVSS6.8AI score0.00989EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 12:38 a.m.•13 views

CVE-2015-10005

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

7.5CVSS6.9AI score0.00989EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/16 12:31 a.m.•66 views

GHSA-J3V9-6GC7-VF5F Meteor Affected By Inefficient Regular Expression Complexity

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

6.3CVSS6.8AI score0.00868EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
•added 2025/05/16 12:31 a.m.•34 views

Meteor Affected By Inefficient Regular Expression Complexity

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

6.3CVSS6.9AI score0.00868EPSS
SaveExploits1References9Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/15 11:00 p.m.•13 views

CVE-2025-4727 Meteor livedata_server.js Object.assign redos

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

6.3CVSS4.4AI score0.00868EPSS
SaveExploits1References7
Mend
Mend
•added 2025/05/15 11:00 p.m.•7 views

CVE-2025-4727

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

6.3CVSS0.00868EPSS
SaveExploits1References10
CVE
CVE
•added 2025/05/15 11:00 p.m.•67 views

CVE-2025-4727

Summary: CVE-2025-4727 affects Meteor up to 3.2.1, involving the Object.assign handling in packages/ddp-server/livedata_server.js where forwardedFor manipulation enables inefficient regex complexity (ReDoS). The issue may be remotely exploitable and requires high attack complexity. Public exploit...

6.3CVSS4.5AI score0.00868EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2025/05/15 11:00 p.m.•24 views

CVE-2025-4727 Meteor livedata_server.js Object.assign redos

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

6.3CVSS4.5AI score
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•5 views

CVE-2025-4727: Inefficient Regular Expression Complexity

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

6.3CVSS4.2AI score0.00868EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/15 12:00 a.m.•19 views

PT-2025-21583 · Meteor · Meteor

Name of the Vulnerable Software and Affected Versions: Meteor versions up to 3.2.1 Description: A vulnerability was found in the function Object.assign of the file packages/ddp-server/livedata server.js. The manipulation of the argument forwardedFor leads to inefficient regular expression...

6.3CVSS4AI score0.00868EPSS
SaveExploits1References13
RedhatCVE
RedhatCVE
•added 2025/05/04 8:58 p.m.•21 views

CVE-2025-4215

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.1CVSS6.9AI score0.00789EPSS
SaveExploits1References8
NVD
NVD
•added 2025/05/02 9:15 p.m.•21 views

CVE-2025-4215

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.7CVSS0.00789EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/05/02 8:31 p.m.•53 views

CVE-2025-4215 gorhill uBlock Origin UI 1p-filters.js currentStateChanged redos

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.1CVSS0.00789EPSS
SaveExploits1References5
Mend
Mend
•added 2025/05/02 8:31 p.m.•6 views

CVE-2025-4215

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.7CVSS0.00789EPSS
SaveExploits1References9
Rows per page
Query Builder