UBUNTU-CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

UBUNTU-CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

code-server is vulnerable to Inefficient Regular Expression Complexity...

Inefficient Regular Expression Complexity in isaacs/minimatch

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in minimatch. It allows cause a denial of service when calling function braceExpand. The ReDoS vulnerability is mainly due to the regex /./ and can be exploited with the following code. Proof of Concept...

CVE-2021-3810 Inefficient Regular Expression Complexity in cdr/code-server

code-server is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3804

CVE-2021-3804 affects taro (NervJS/taro) with an Inefficient Regular Expression Complexity flaw. The vulnerability is reported as high impact (availability). The NVD/NVD-derived data cite network attack vector with low complexity and no authentication/interaction required. Several connected sourc...

taro 安全漏洞

Taro is an open cross-end, cross-framework solution. A security vulnerability exists in taro that stems from susceptibility to inefficient regular expression complexity...

PT-2021-21940 · Taro · Taro

Name of the Vulnerable Software and Affected Versions: taro affected versions not specified Description: The issue is related to Inefficient Regular Expression Complexity. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents...

CVE-2021-3807 Inefficient Regular Expression Complexity in chalk/ansi-regex

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

Python 资源管理错误漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A resource management error vulnerability exists in the AbstractBasicAuthHandler class of python urllib, which ste...

CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3803 Inefficient Regular Expression Complexity in fb55/nth-check

nth-check is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3803

CVE-2021-3803 is linked to nth-check’s Inefficient Regular Expression Complexity. IBM security bulletin for IBM watsonx Orchestrate Developer Edition (1.4.0–1.14.0) lists this CVE and states the remediation is to upgrade to Release 1.15.0. The core issue is the nth-check regex complexity; no expl...

CVE-2021-3807

CVE-2021-3807 affects ansi-regex, enabling Regular Expression Denial of Service (ReDoS) with high impact (CVSS v3.1 base 7.5). Connected docs confirm DoS in Jira Data Center/Server and Jira Service Management, with fixed versions including Jira DC/Server 10.3.16+ and 11.2.1+. Remediation is to up...

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

Regular expression Denial of Service

More info at https://typo3.org/security/advisory/typo3-ext-sa-2021-016...

Inefficient Regular Expression Complexity in chocobozzz/peertube

Description Hello Again dear Peertube team. I found inefficient regular expression in that have a Polynomial execution time that can be lead to ReDoS attacks and it is better to replace it with another regex or Use google re2 regex engine for server sides code. Proof of Concept I create two...

Inefficient Regular Expression Complexity in faisalman/ua-parser-js

Description Hello my dear I found another inefficient regular expression in ua-parser-js that have a Polynomial execution time not exponential but still dangerous. Proof of Concept I create two payloads that you can compare the execution times between them in Regexr provided links. payload 1...

Regular Expression Denial Of Service (ReDoS)

semver-regex is vulnerable to regular expression denial of service. An attacker is able to crash the application by submitting a malicious string to the function semverRegex...