Lucene search
+L

469 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:43 p.m.•19 views

CVE-2021-3804

taro is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS7.3AI score0.01262EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:35 p.m.•21 views

CVE-2020-36661

A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function isheader of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to version 0.5.9-1 is able to address this...

7.5CVSS5.1AI score0.0092EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 10:38 a.m.•23 views

CVE-2019-25103

A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file simple-markdown.js. The manipulation leads to inefficient regular expression complexity. The attack can be launched remotely. Upgrading to...

7.5CVSS5AI score0.0094EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:26 a.m.•18 views

CVE-2018-25074

A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validators/base.js. The manipulation of the argument uri leads to inefficient regular expression complexity. The patch is named...

7.5CVSS5.2AI score0.0096EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:56 a.m.•16 views

CVE-2017-20162

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has...

5.3CVSS5.2AI score0.01018EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 12:38 a.m.•13 views

CVE-2015-10005

A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/htmlre.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of t...

7.5CVSS4.9AI score0.00989EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2025/05/16 12:31 a.m.•74 views

GHSA-J3V9-6GC7-VF5F Meteor Affected By Inefficient Regular Expression Complexity

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

6.3CVSS4.5AI score0.00922EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
•added 2025/05/16 12:31 a.m.•38 views

Meteor Affected By Inefficient Regular Expression Complexity

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

6.3CVSS4.5AI score0.00922EPSS
SaveExploits1References9Affected Software1
Mend
Mend
•added 2025/05/15 11:00 p.m.•10 views

CVE-2025-4727

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

6.3CVSS4.5AI score0.00922EPSS
SaveExploits1References10
osv_cve
osv_cve
•added 2025/05/15 11:00 p.m.•31 views

CVE-2025-4727 Meteor livedata_server.js Object.assign redos

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

6.3CVSS4.5AI score0.00922EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
•added 2025/05/15 11:00 p.m.•13 views

CVE-2025-4727 Meteor livedata_server.js Object.assign redos

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

6.3CVSS4.5AI score0.00922EPSS
SaveExploits1References7
CVE
CVE
•added 2025/05/15 11:00 p.m.•74 views

CVE-2025-4727

Summary: CVE-2025-4727 affects Meteor up to 3.2.1, involving the Object.assign handling in packages/ddp-server/livedata_server.js where forwardedFor manipulation enables inefficient regex complexity (ReDoS). The issue may be remotely exploitable and requires high attack complexity. Public exploit...

6.3CVSS4.5AI score0.00922EPSS
SaveExploits1References7Affected Software1
Positive Technologies
Positive Technologies
•added 2025/05/15 12:00 a.m.•23 views

PT-2025-21583 · Meteor · Meteor

Name of the Vulnerable Software and Affected Versions: Meteor versions up to 3.2.1 Description: A vulnerability was found in the function Object.assign of the file packages/ddp-server/livedata server.js. The manipulation of the argument forwardedFor leads to inefficient regular expression...

6.3CVSS5.1AI score0.00922EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•6 views

CVE-2025-4727: Inefficient Regular Expression Complexity

A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedataserver.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be...

6.3CVSS4.5AI score0.00922EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/04 8:58 p.m.•25 views

CVE-2025-4215

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.1CVSS3.7AI score0.00789EPSS
SaveExploits1References8
NVD
NVD
•added 2025/05/02 9:15 p.m.•24 views

CVE-2025-4215

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.7CVSS0.00789EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/05/02 8:31 p.m.•55 views

CVE-2025-4215 gorhill uBlock Origin UI 1p-filters.js currentStateChanged redos

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.1CVSS0.00789EPSS
SaveExploits1References5
Mend
Mend
•added 2025/05/02 8:31 p.m.•9 views

CVE-2025-4215

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.7CVSS3.7AI score0.00789EPSS
SaveExploits1References9
CVE
CVE
•added 2025/05/02 8:31 p.m.•112 views

CVE-2025-4215

CVE-2025-4215 affects gorhill uBlock Origin up to 1.63.3b16, specifically the UI function currentStateChanged in src/js/1p-filters.js. The issue is described as an inefficient regular expression pattern used in filters, which can be triggered remotely and carries a relatively high attack complexi...

3.7CVSS3.7AI score0.00789EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/02 12:00 a.m.•7 views

CVE-2025-4215: Inefficient Regular Expression Complexity

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to laun...

3.7CVSS3.7AI score0.00789EPSS
SaveExploits1References1
Rows per page
Query Builder