The vulnerability of the regular expression processor in the Mime-type parser of the ActionDispatch framework in the Ruby programming platform of Ruby on Rails, related to an uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the regular expression processor in the Mime-type parser of the ActionDispatch framework in the Ruby programming platform’s Ruby on Rails framework is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service...

Inefficient Regular Expression Complexity in nltk/nltk

✍️ Description The nltk package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide as an input to the readcomparisonblock function in the file "nltk/corpus/reader/comparativesents.py" may cause an application to consume an excessive amount of CPU. Belo...

Inefficient Regular Expression Complexity in pksunkara/inflect

✍️ Description The inflect package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted tablename as input to the classify function may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex. 🕵️‍♂️...

Inefficient Regular Expression Complexity in mochajs/mocha

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in mocha. It allows cause a denial of service when stripping crafted invalid function definition from strs. The ReDoS vulnerability is mainly due to the regex...

CVE-2021-3801

Insufficient Regular Expression Complexity in prismjs leads to a Regular Expression Denial of Service ReDoS attack. An unauthenticated attacker can exploit this flaw to cause an application to consume an excess amount of CPU by providing a crafted HTML comment as input. This can result in a denia...

Inefficient Regular Expression Complexity in validatorjs/validator.js

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in validator. It allows cause a denial of service when validating crafted invalid MagnetURIs. The ReDoS vulnerability is mainly due to the sub-pattern .+&tr=.+ with quantified overlapping adjacency and c...

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3804

taro is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

DEBIAN-CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3804

taro is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3810

code-server is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

taro is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

nth-check is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3810

code-server is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3804

taro is vulnerable to Inefficient Regular Expression Complexity...