6797 matches found
CVE-2021-40895
A Regular Expression Denial of Service ReDOS vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements...
CVE-2021-40897
A Regular Expression Denial of Service ReDOS vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls...
CVE-2021-40895
A Regular Expression Denial of Service ReDOS vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements...
CVE-2021-40897
A Regular Expression Denial of Service ReDOS vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls...
CVE-2021-40896
A Regular Expression Denial of Service ReDOS vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails...
Denial of service
A Regular Expression Denial of Service ReDOS vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements...
Denial of service
A Regular Expression Denial of Service ReDOS vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls...
CVE-2021-40897
A Regular Expression Denial of Service ReDOS vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls...
CVE-2021-40897
CVE-2021-40897 affects split-html-to-chars v1.0.5. A Regular Expression Denial of Service (ReDOS) vulnerability arises from inefficient patterns in the Splitter when processing crafted invalid HTML, leading to potential denial of service. Public references describe the issue in index.js and relat...
CVE-2021-40896
CVE-2021-40896 affects that-value v0.1.3, with a Regular Expression Denial of Service when validating crafted invalid emails. Affected component: that-value (Python/JS validator package as per sources). Root cause: ReDOS vulnerability described in multiple entries (NVD/Red Hat/CNVD) as a flaw in ...
CVE-2021-40896
A Regular Expression Denial of Service ReDOS vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails...
CVE-2021-40895
A Regular Expression Denial of Service ReDOS vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements...
PT-2022-11323 · Unknown · Todo-Regex
Name of the Vulnerable Software and Affected Versions: todo-regex version 0.1.1 Description: A Regular Expression Denial of Service ReDOS issue was found in the software when it matches crafted invalid TODO statements. This occurs because the regular expression used can be exploited to cause a...
PT-2022-11327 · Unknown · Repo-Git-Downloader
Name of the Vulnerable Software and Affected Versions: repo-git-downloader version 0.1.1 Description: A Regular Expression Denial of Service ReDOS issue was found in the software when it downloads crafted invalid git repositories. This occurs due to a flaw in how regular expressions are handled,...
PT-2022-11326 · Unknown · Scaffold-Helper
Name of the Vulnerable Software and Affected Versions: scaffold-helper version 1.2.0 Description: A Regular Expression Denial of Service ReDOS issue was found in scaffold-helper when copying crafted invalid files. This occurs due to inefficient regular expression handling, which can lead to...
PT-2022-11325 · Unknown · Split-Html-To-Chars
Name of the Vulnerable Software and Affected Versions: split-html-to-chars version 1.0.5 Description: A Regular Expression Denial of Service ReDOS issue was found in the software when it processes crafted invalid HTML. This occurs due to inefficient regular expression patterns that can lead to...
regexfn 安全漏洞
regexfn is a function that can be used for generic RegEx validation. regexfn version v1.0.5 contains a denial of service vulnerability that stems from not doing the right thing when validating crafted invalid emails, which could be exploited by an attacker to cause an application denial of servic...
PT-2022-11324 · Unknown · That-Value
Name of the Vulnerable Software and Affected Versions: that-value version 0.1.3 Description: A Regular Expression Denial of Service ReDOS vulnerability was discovered in that-value when validating crafted invalid emails. Recommendations: For that-value version 0.1.3, update to a version that fixe...