6802 matches found
Inefficient Regular Expression Complexity in pyload/pyload
✍️ Description The pyload package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide crafted HTML comments as input to the comments function of utils/web/purge.py may cause an application to consume an excessive amount of CPU. Below pinned line using...
Regular Expression Denial Of Service (ReDoS)
ansi-regex is vulnerable to regular expression denial of service. The vulnerability exists due to an inefficient handling of user-provided string pattern, causing intensive processing of regular expression machine and application crash...
Regular Expression Denial Of Service (ReDoS)
nth-check is vulnerable to regular expression denial of service. The vulnerability exists due to inefficient regular expression complexity in parse.ts, which may crash the system when parsing a malicious string...
Inefficient Regular Expression Complexity in josdejong/jsoneditor
✍️ Description The jsoneditor package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted element as input to the getInnerText function may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex...
Regular Expression Denial Of Service (ReDoS)
code-server is vulnerable to regular expression denial of service. An attacker is able to send a malicious string which require extensive processing of regex machine, leading to an application crash...
flask-restx 资源管理错误漏洞
flask-restx is a software application. Fork Flask-RESTPlus: Full-featured framework for fast, simple and documented API development Bottle A resource management error vulnerability previously existed in Flask-RESTX version 0.5.1 that allowed an attacker to conduct a ReDoS Regular Expression Denia...
Apprise 资源管理错误漏洞
Apprise is used for push notifications on almost all platforms. Apprise suffers from a resource management error vulnerability that allows attackers to conduct ReDoS Regular Expression Denial of Service attacks...
The vulnerability of the regular expression processor in the Mime-type parser of the ActionDispatch framework in the Ruby programming platform of Ruby on Rails, related to an uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of the regular expression processor in the Mime-type parser of the ActionDispatch framework in the Ruby programming platform’s Ruby on Rails framework is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service...
Inefficient Regular Expression Complexity in nltk/nltk
✍️ Description The nltk package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide as an input to the readcomparisonblock function in the file "nltk/corpus/reader/comparativesents.py" may cause an application to consume an excessive amount of CPU. Belo...
Inefficient Regular Expression Complexity in pksunkara/inflect
✍️ Description The inflect package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted tablename as input to the classify function may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex. 🕵️♂️...
Inefficient Regular Expression Complexity in mochajs/mocha
Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in mocha. It allows cause a denial of service when stripping crafted invalid function definition from strs. The ReDoS vulnerability is mainly due to the regex...
CVE-2021-3801
Insufficient Regular Expression Complexity in prismjs leads to a Regular Expression Denial of Service ReDoS attack. An unauthenticated attacker can exploit this flaw to cause an application to consume an excess amount of CPU by providing a crafted HTML comment as input. This can result in a denia...
Inefficient Regular Expression Complexity in validatorjs/validator.js
Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in validator. It allows cause a denial of service when validating crafted invalid MagnetURIs. The ReDoS vulnerability is mainly due to the sub-pattern .+&tr=.+ with quantified overlapping adjacency and c...
CVE-2021-3807
ansi-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3804
taro is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...
DEBIAN-CVE-2021-3803
nth-check is vulnerable to Inefficient Regular Expression Complexity...