PYSEC-2021-356

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822

The CVE-2021-3822 entry concerns jsoneditor (josdejong/jsoneditor), where the getInnerText function uses an inefficient regex for trimmedValue, creating potential Regular Expression Denial of Service (ReDoS). Multiple connected sources corroborate a ReDoS risk affecting jsoneditor, with reference...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3820

inflect is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3820

CVE-2021-3820 affects the npm package inflect. The vulnerability is a result of inefficient regular expressions (ReDoS) in the table_name input to the classify function, enabling an attacker to cause excessive CPU usage and potential denial of service. A PoC snippet demonstrates escalating CPU co...

CVE-2021-40098

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression...

CVE-2021-40098

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression...

Path traversal

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression...

CVE-2021-40098

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression...

CVE-2021-40098

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression...

nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe

A flaw was found in nodejs-path-parse. All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

CVE-2021-40098: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression...

PT-2021-22807

Name of the Vulnerable Software and Affected Versions Concrete CMS versions through 8.5.5 Description An issue was discovered in Concrete CMS, allowing Path Traversal leading to Remote Code Execution RCE via an external form by adding a regular expression. Recommendations For versions through...

CVE-2021-3822: Inefficient Regular Expression Complexity

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3820: Inefficient Regular Expression Complexity

inflect is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3828: Inefficient Regular Expression Complexity

nltk is vulnerable to Inefficient Regular Expression Complexity...

PT-2021-22006

Name of the Vulnerable Software and Affected Versions: inflect affected versions not specified Description: The issue concerns Inefficient Regular Expression Complexity. inflect is a customizable inflections library for nodejs. Recommendations: At the moment, there is no information about a newer...

Inefficient Regular Expression Complexity in crankyoldgit/irremoteesp8266

✍️ Description The IRremoteESP8266 package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide crafted input to the extractsupports function in the file scrapesupporteddevices.py may cause an application to consume an excessive amount of CPU. Below...