8140 matches found
Inefficient Regular Expression Complexity in chocobozzz/peertube
Description Hello Again dear Peertube team. I found inefficient regular expression in that have a Polynomial execution time that can be lead to ReDoS attacks and it is better to replace it with another regex or Use google re2 regex engine for server sides code. Proof of Concept I create two...
Inefficient Regular Expression Complexity in faisalman/ua-parser-js
Description Hello my dear I found another inefficient regular expression in ua-parser-js that have a Polynomial execution time not exponential but still dangerous. Proof of Concept I create two payloads that you can compare the execution times between them in Regexr provided links. payload 1...
Regular Expression Denial Of Service (ReDoS)
semver-regex is vulnerable to regular expression denial of service. An attacker is able to crash the application by submitting a malicious string to the function semverRegex...
Ubuntu 16.04 ESM : Python vulnerabilities (USN-5083-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5083-1 advisory. It was discovered that Python incorrectly handled certain RFCs. An attacker could possibly use this issue to cause a denial of service. This issue only...
CVE-2021-3795
semver-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3795
semver-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3795
semver-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3795 Inefficient Regular Expression Complexity in sindresorhus/semver-regex
semver-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3795
semver-regex is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3801
prism is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3794
vuelidate is vulnerable to Inefficient Regular Expression Complexity...
DEBIAN-CVE-2021-3801
prism is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
vuelidate is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
prism is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3794
vuelidate is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3801
prism is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3801
prism is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3801
prism is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3801
CVE-2021-3801 : Prismjs Prism vulnerable to a denial of service via inefficient regular expression complexity. A crafted input (e.g., crafted HTML comment) can trigger high CPU usage in Prism highlighting. Affected: Prismjs components relying on regex for highlighting. No exploits/vectors detaile...
