CVE-2021-23446

CVE-2021-23446 affects Handsontable (a JavaScript data grid) where the vulnerability is a Regular Expression Denial of Service (ReDoS) in the function Handsontable.helper.isNumeric. Affected versions are Handsontable

Regular Expression Denial Of Service (ReDoS)

soap is vulnerable to regular expression denial of service. The use of an inefficient regex pattern for match in handleResponse function of http.js allows a malicious user to crash the application by providing a malicious input...

PT-2021-15530 · Unknown · Handsontable

Name of the Vulnerable Software and Affected Versions: handsontable versions 0 through 10.0.0 excluding 10.0.0 Description: The issue concerns a Regular Expression Denial of Service ReDoS in the Handsontable.helper.isNumeric function. This affects the handsontable package, making it vulnerable to...

Regular Expression Denial Of Service (ReDoS)

jsoneditor is vulnerable to regular expression denial of service. The use of inefficient regex pattern for trimmedValue in getInnerText function of util.js allows a malicious user to crash the application by providing a malicious input...

Regular Expression Denial Of Service (ReDoS)

i is vulnerable to regular expression denial of service. An attacker is able to crash the application by providing a malicious input through the classify function in methods.js...

Regular Expression Denial Of Service (ReDoS)

nltk is vulnerable to regular expression denial of service. An attacker is able to crash the application by providing a malicious input through the readcomparisonblock function in comparativesents.py...

Regular Expression Denial of Service (ReDoS)

Overview handsontable is a JavaScript Spreadsheet Component available for React, Angular and Vue. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in Handsontable.helper.isNumeric function. Details Denial of Service DoS describes a family of attacks,...

Regular Expression Denial of Service (ReDoS)

Overview Handsontable is a data grid component with an Excel-like appearance. Built in JavaScript, it integrates with any data source and comes with features like data validation, sorting, grouping, data binding or column ordering. Affected versions of this package are vulnerable to Regular...

SUSE-SU-2021:3234-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues: - CVE-2021-23437: Fixed regular expression denial of service ReDoS via the getrgb function bsc1190229...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

inflect is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

PYSEC-2021-356

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822

The CVE-2021-3822 entry concerns jsoneditor (josdejong/jsoneditor), where the getInnerText function uses an inefficient regex for trimmedValue, creating potential Regular Expression Denial of Service (ReDoS). Multiple connected sources corroborate a ReDoS risk affecting jsoneditor, with reference...

CVE-2021-3820

CVE-2021-3820 affects the npm package inflect. The vulnerability is a result of inefficient regular expressions (ReDoS) in the table_name input to the classify function, enabling an attacker to cause excessive CPU usage and potential denial of service. A PoC snippet demonstrates escalating CPU co...