6803 matches found
in youzan/vant
✍️ Description The @vant/cli package is vulnerable to Regular Expression Denial of Service ReDoS. An attacker that is able to provide a crafted string as the input to the decamelize function may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex...
Updated python-pillow packages fix security vulnerability
Updated python-pillow packages fix security vulnerability: The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function CVE-2021-23437...
MGASA-2021-0448 Updated python-pillow packages fix security vulnerability
Updated python-pillow packages fix security vulnerability: The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function CVE-2021-23437...
GHSA-HHFG-6HFC-RVXM Regular Expression Denial of Service in jsoneditor
JSON Editor is a web-based tool to view, edit, format, and validate JSON. It has various modes such as a tree editor, a code editor, and a plain text editor. The jsoneditor package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted element a...
CVE-2021-23446
The package handsontable before 10.0.0; the package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service ReDoS in Handsontable.helper.isNumeric function...
Design/Logic Flaw
The package handsontable before 10.0.0; the package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service ReDoS in Handsontable.helper.isNumeric function...
NLTK Vulnerable to REDoS
The nltk package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide as an input to the readcomparisonblockhttps://github.com/nltk/nltk/blob/23f4b1c4b4006b0cb3ec278e801029557cec4e82/nltk/corpus/reader/comparativesents.pyL259 function in the file...
CVE-2021-23446
CVE-2021-23446 affects Handsontable (a JavaScript data grid) where the vulnerability is a Regular Expression Denial of Service (ReDoS) in the function Handsontable.helper.isNumeric. Affected versions are Handsontable
CVE-2021-23446 Regular Expression Denial of Service (ReDoS)
The package handsontable before 10.0.0; the package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service ReDoS in Handsontable.helper.isNumeric function...
Regular Expression Denial Of Service (ReDoS)
soap is vulnerable to regular expression denial of service. The use of an inefficient regex pattern for match in handleResponse function of http.js allows a malicious user to crash the application by providing a malicious input...
PT-2021-15530 · Unknown · Handsontable
Name of the Vulnerable Software and Affected Versions: handsontable versions 0 through 10.0.0 excluding 10.0.0 Description: The issue concerns a Regular Expression Denial of Service ReDoS in the Handsontable.helper.isNumeric function. This affects the handsontable package, making it vulnerable to...
Regular Expression Denial Of Service (ReDoS)
jsoneditor is vulnerable to regular expression denial of service. The use of inefficient regex pattern for trimmedValue in getInnerText function of util.js allows a malicious user to crash the application by providing a malicious input...
Regular Expression Denial Of Service (ReDoS)
i is vulnerable to regular expression denial of service. An attacker is able to crash the application by providing a malicious input through the classify function in methods.js...
Regular Expression Denial Of Service (ReDoS)
nltk is vulnerable to regular expression denial of service. An attacker is able to crash the application by providing a malicious input through the readcomparisonblock function in comparativesents.py...
Regular Expression Denial of Service (ReDoS)
Overview handsontable is a JavaScript Spreadsheet Component available for React, Angular and Vue. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in Handsontable.helper.isNumeric function. Details Denial of Service DoS describes a family of attacks,...
Regular Expression Denial of Service (ReDoS)
Overview Handsontable is a data grid component with an Excel-like appearance. Built in JavaScript, it integrates with any data source and comes with features like data validation, sorting, grouping, data binding or column ordering. Affected versions of this package are vulnerable to Regular...
SUSE-SU-2021:3234-1 Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2021-23437: Fixed regular expression denial of service ReDoS via the getrgb function bsc1190229...
CVE-2021-3822
jsoneditor is vulnerable to Inefficient Regular Expression Complexity...