Lucene search
+L

6776 matches found

Github Security Blog
Github Security Blog
added 2024/10/26 9:30 p.m.25 views

validate.js Regular Expression Denial of Service vulnerability

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS6.8AI score0.00493EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2024/10/26 9:30 p.m.18 views

CommonRegexJS Regular Expression Denial of Service vulnerability

CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS6.8AI score0.0046EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/10/26 9:30 p.m.12 views

GHSA-PMVV-57RG-5G86 CommonRegexJS Regular Expression Denial of Service vulnerability

CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS7.5AI score0.0046EPSS
SaveExploits0References4
OSV
OSV
added 2024/10/26 9:30 p.m.4 views

GHSA-RV73-9C8W-JP4C validate.js Regular Expression Denial of Service vulnerability

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS5.9AI score0.00493EPSS
SaveExploits1References4
OSV
OSV
added 2024/10/26 9:30 p.m.1 views

GHSA-W455-MFQ9-HF74 insane vulnerable to Regular Expression Denial of Service

insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS5.9AI score0.00513EPSS
SaveExploits1References4
NVD
NVD
added 2024/10/26 9:15 p.m.22 views

CVE-2020-26308

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS0.00493EPSS
SaveExploits1References2
NVD
NVD
added 2024/10/26 9:15 p.m.13 views

CVE-2020-26309

Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any patches are available...

8.7CVSS0.00435EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/26 9:15 p.m.7 views

CVE-2020-26311

Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no patches are available...

7.5CVSS5.8AI score0.00493EPSS
SaveExploits1References2
NVD
NVD
added 2024/10/26 9:15 p.m.22 views

CVE-2020-26310

Validate.js provides a declarative way of validating javascript objects. All versions as of 30 November 2020 contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any patches are available...

8.7CVSS0.00389EPSS
SaveExploits0References2
NVD
NVD
added 2024/10/26 9:15 p.m.9 views

CVE-2020-26303

insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS0.00513EPSS
SaveExploits1References2
OSV
OSV
added 2024/10/26 9:15 p.m.4 views

CVE-2020-26304

Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any fixes are available...

7.5CVSS5.8AI score0.00513EPSS
SaveExploits1References2
CVE
CVE
added 2024/10/26 8:26 p.m.70 views

CVE-2020-26311

The CVE-2020-26311 entry concerns the Node.js Useragent parser. The connected sources confirm a Regular Expression Denial of Service (ReDoS) vulnerability caused by one or more part-regular expressions within the useragent package, affecting all versions at the time of publication. The impact is ...

8.7CVSS7.5AI score0.00493EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/26 8:26 p.m.14 views

CVE-2020-26311 GHSL-2020-312: Regular Expression Denial of Service (ReDoS) in useragent

Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no patches are available...

8.7CVSS6.5AI score0.00493EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/10/26 8:26 p.m.36 views

CVE-2020-26311 GHSL-2020-312: Regular Expression Denial of Service (ReDoS) in useragent

Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no patches are available...

8.7CVSS0.00493EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/10/26 8:26 p.m.26 views

CVE-2020-26310 GHSL-2020-305: Regular Expression Denial of Service (ReDoS) in Pure JavaScript HTML5 Parser

Validate.js provides a declarative way of validating javascript objects. All versions as of 30 November 2020 contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any patches are available...

8.7CVSS0.00389EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/26 8:26 p.m.77 views

CVE-2020-26310

CVE-2020-26310 affects Validate.js; all versions as of 30 November 2020 are vulnerable to Regular Expression Denial of Service (ReDoS). Connected sources confirm a CVSS base score of 8.7 ( HIGH ), AV:N/AC:L/AT:N/PR:N/UI:N/VI:N/SC:N/VA:H, with potential impact on availability and negligible impact...

8.7CVSS6.5AI score0.00389EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/26 8:26 p.m.12 views

CVE-2020-26310 GHSL-2020-305: Regular Expression Denial of Service (ReDoS) in Pure JavaScript HTML5 Parser

Validate.js provides a declarative way of validating javascript objects. All versions as of 30 November 2020 contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any patches are available...

8.7CVSS6.9AI score0.00389EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/10/26 8:26 p.m.21 views

CVE-2020-26309 GHSL-2020-303: Regular Expression Denial of Service (ReDoS) in nope-validator

Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, it is unknown if any patches are available...

8.7CVSS0.00435EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/26 8:26 p.m.5 views

CVE-2020-26308 GHSL-2020-302: Regular Expression Denial of Service (ReDoS) in validate.js

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS6.9AI score0.00493EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/10/26 8:26 p.m.16 views

CVE-2020-26308 GHSL-2020-302: Regular Expression Denial of Service (ReDoS) in validate.js

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are available...

8.7CVSS0.00493EPSS
SaveExploits1References2
Rows per page
Query Builder