Lucene search
+L

6795 matches found

Github Security Blog
Github Security Blog
added 2021/09/20 8:18 p.m.36 views

Inefficient Regular Expression Complexity in code-server

code-server is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS7.3AI score0.01262EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2021/09/20 8:9 p.m.29 views

Inefficient Regular Expression Complexity in taro

taro is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS7.3AI score0.01262EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/09/20 8:9 p.m.1 views

GHSA-468Q-V4JJ-485H Inefficient Regular Expression Complexity in taro

taro is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS5.9AI score0.01262EPSS
SaveExploits1References4
PyPA
PyPA
added 2021/09/20 6:15 p.m.9 views

PYSEC-2021-325

Flask-RESTX pypi package flask-restx is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is vulnerable to ReDoS Regular Expression Denial of Service in emailregex. This is fixed in version 0.5.1...

7.5CVSS6.8AI score0.01864EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2021/09/20 5:30 p.m.120 views

CVE-2021-32838

CVE-2021-32838 : Flask-RESTX (flask-restx) before 0.5.1 is vulnerable to a Regular Expression Denial of Service (ReDoS) in email_regex. The issue is fixed in version 0.5.1. Affected: Flask-RESTX prior to 0.5.1. Impact details are limited to what the description states; no exploitation or scope be...

7.5CVSS7.2AI score0.01864EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2021/09/20 5:15 p.m.1 views

DEBIAN-CVE-2021-32839

sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...

7.5CVSS7.4AI score0.02295EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/20 5:15 p.m.9 views

CVE-2021-32839

sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...

7.5CVSS0.02295EPSS
SaveExploits0References3
Prion
Prion
added 2021/09/20 5:15 p.m.25 views

Design/Logic Flaw

sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...

5CVSS7.8AI score0.02295EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/09/20 5:15 p.m.25 views

CVE-2021-32839

sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...

7.5CVSS7AI score0.02295EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2021/09/20 5:10 p.m.71 views

CVE-2021-32839

sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...

7.5CVSS8AI score0.02295EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/09/20 5:10 p.m.32 views

CVE-2021-32839 Regular Expression Denial of Service in sqlparse

sqlparse is a non-validating SQL parser module for Python. In sqlparse versions 0.4.0 and 0.4.1 there is a regular Expression Denial of Service in sqlparse vulnerability. The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. On...

7.5CVSS8.2AI score0.02295EPSS
SaveExploits0References2
Huntr
Huntr
added 2021/09/20 1:13 p.m.9 views

Inefficient Regular Expression Complexity in ampproject/amphtml

✍️ Description The amphtml package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted template as input to the expandTemplate function of core/types/string/index.js may cause an application to consume an excessive amount of CPU. Below pinned...

0.9AI score
SaveExploits0
Huntr
Huntr
added 2021/09/20 12:0 p.m.11 views

Inefficient Regular Expression Complexity in alvations/sacremoses

✍️ Description The sacremoses package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted text as input to the hasnumericonly function may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex...

0.4AI score
SaveExploits0
Huntr
Huntr
added 2021/09/20 11:31 a.m.11 views

Inefficient Regular Expression Complexity in pyload/pyload

✍️ Description The pyload package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide crafted HTML comments as input to the comments function of utils/web/purge.py may cause an application to consume an excessive amount of CPU. Below pinned line using...

1AI score
SaveExploits0
Veracode
Veracode
added 2021/09/20 10:48 a.m.28 views

Regular Expression Denial Of Service (ReDoS)

ansi-regex is vulnerable to regular expression denial of service. The vulnerability exists due to an inefficient handling of user-provided string pattern, causing intensive processing of regular expression machine and application crash...

7.5CVSS3.1AI score0.03552EPSS
SaveExploits1References4Affected Software8
Veracode
Veracode
added 2021/09/20 6:48 a.m.84 views

Regular Expression Denial Of Service (ReDoS)

nth-check is vulnerable to regular expression denial of service. The vulnerability exists due to inefficient regular expression complexity in parse.ts, which may crash the system when parsing a malicious string...

7.5CVSS7.2AI score0.02165EPSS
SaveExploits1References4Affected Software2
Huntr
Huntr
added 2021/09/20 6:33 a.m.20 views

Inefficient Regular Expression Complexity in josdejong/jsoneditor

✍️ Description The jsoneditor package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted element as input to the getInnerText function may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex...

5CVSS0.6AI score0.01418EPSS
SaveExploits1
Veracode
Veracode
added 2021/09/20 6:12 a.m.13 views

Regular Expression Denial Of Service (ReDoS)

code-server is vulnerable to regular expression denial of service. An attacker is able to send a malicious string which require extensive processing of regex machine, leading to an application crash...

7.5CVSS4AI score0.01262EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2021/09/20 12:0 a.m.11 views

flask-restx 资源管理错误漏洞

flask-restx is a software application. Fork Flask-RESTPlus: Full-featured framework for fast, simple and documented API development Bottle A resource management error vulnerability previously existed in Flask-RESTX version 0.5.1 that allowed an attacker to conduct a ReDoS Regular Expression Denia...

7.5CVSS7.5AI score0.01864EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2021/09/20 12:0 a.m.9 views

Apprise 资源管理错误漏洞

Apprise is used for push notifications on almost all platforms. Apprise suffers from a resource management error vulnerability that allows attackers to conduct ReDoS Regular Expression Denial of Service attacks...

7.5CVSS7.3AI score0.01891EPSS
SaveExploits1References4
Rows per page
Query Builder