Regular Expression Denial Of Service (ReDoS)

minimatch is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists when calling the braceExpand function of minimatch.js with specific arguments, resulting in a denial of service...

nokogiri: ReDoS in HTML encoding detection

A flaw was found in the nokogiri library when processing an inefficient and complex regular expression. This flaw allows an attacker to cause excessive consumption of resources, which affects performance...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-Mako (SUSE-SU-2022:3979-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3979-1 advisory. - CVE-2022-40023: Fixed regular expression Denial of Service when using the Lexer class to parse...

Liferay Portal和Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS, and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

Regular Expression Denial Of Service

pymatgen is vulnerable to regular expression Denial of Service. The vulnerability exists due to the fromstring function in gaussian.py improper regular expression handling. An attacker can supply arbitrary input to the function, resulting in Denial of Service...

GHSA-4R6J-FWCX-94CF snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the getfiletransfertype method...

PYSEC-2022-43178

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

CVE-2022-42965

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

CVE-2022-42964

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

DEBIAN-CVE-2022-42964

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

CVE-2022-42966 Exponential ReDoS in cleo leads to denial of service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.setrows method...

PT-2022-26685 · Pypi · Cleo

Name of the Vulnerable Software and Affected Versions: cleo affected versions not specified Description: An exponential ReDoS Regular Expression Denial of Service can be triggered in the cleo PyPI package when an attacker is able to supply arbitrary input to the Table.set rows method...

PT-2022-26684

Name of the Vulnerable Software and Affected Versions snowflake-connector-python affected versions not specified Description An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package when an attacker is able to supply arbitrary input...

PT-2022-26683

Name of the Vulnerable Software and Affected Versions pymatgen affected versions not specified Description An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package when an attacker is able to supply arbitrary input to the GaussianInput.from string...

CVE-2022-42966

CVE-2022-42966 concerns the PyPI package cleo and an exponential ReDoS (Regular Expression Denial of Service) that can be triggered when an attacker provides arbitrary input to the method Table.set_rows . The connected documents corroborate that the vulnerability arises from the way input is proc...

CVE-2022-42964

CVE-2022-42964 affects the Python package pymatgen (PyPI). The vulnerability arises in the function/flow related to parsing Gaussian inputs, specifically GaussianInput.from_string, where crafted input can trigger an exponential ReDoS in the regular expression handling. This condition can lead to ...

CVE-2022-42965

CVE-2022-42965 affects the Python Snowflake connector (snowflake-connector-python). The vulnerability is an exponential ReDoS in the undocumented get_file_transfer_type method, allowing a network attacker to trigger a denial of service by supplying crafted input. Underlying cause: a vulnerable re...