CVE-2026-76821: Uncontrolled Resource Consumption

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula function compiled a user-supplied regular expression with the JavaScript RegExp engine in...

RockyLinux 8 : perl (RLSA-2026:67162)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67162 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block directly...

AlmaLinux 10 : perl (ALSA-2026:67156)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67156 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block directly...

AlmaLinux 8 : perl (ALSA-2026:67162)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67162 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block directly fr...

AlmaLinux 8 : perl:5.32 (ALSA-2026:67278)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67278 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block directly fr...

AlmaLinux 9 : perl (ALSA-2026:67155)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67155 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block directly fr...

MiracleLinux 8 : perl-5.26.3-423.el8_10.1 (AXSA:2026-1831:24)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1831:24 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block direct...

CVE-2026-57577

DotVVM , an open source MVVM framework for .NET web applications, is susceptible to a ReDoS (Regular Expression Denial of Service) in its routing layer. A route containing multiple unconstrained parameters in a single path segment can trigger excessive backtracking in DotvvmRoute.IsMatch when an ...

OESA-2026-3817 pcre2 security update

PCRE2 is a re-working of the original PCRE1 library to provide an entirely new API. Since its initial release in 2015, there has been further development of the code and it now differs from PCRE1 in more than just the API. PCRE2 is written in C, and it has its own API. There are three sets of...

RLSA-2026:67278 Moderate: perl:5.32 security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...

Astra Linux – Vulnerability in pillow

A issue was discovered in Pillow before version 8.1.1. The PDF parser allows a regular expression DoS ReDoS attack through a crafted PDF file due to a catastrophic backtracking in the regex...

Astra Linux – Vulnerability in pillow

Packages with version numbers 5.2.0 and earlier, as well as 8.3.2, are vulnerable to Regular Expression Denial of Service ReDoS attacks through the getrgb function...

Astra Linux – Vulnerability in Ruby 2.5

In the date gem for Ruby, from version 3.2.0 onwards, Date.parse can cause ReDoS Regular Expression Denial of Service attacks due to the use of a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...

Astra Linux – Vulnerability in node-minimatch

Minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and earlier are vulnerable to Regular Expression Denial of Service ReDoS when a glob pattern contains many consecutive wildcards followed by a literal character that does not...

Astra Linux – Vulnerability in node-minimatch

A vulnerability was discovered in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when the braceExpand function is called with specific arguments, resulting in a denial of service...

Astra Linux – Vulnerability in Ruby 2.5

In the CGI gem before version 0.4.2 for Ruby, there is a Regular Expression Denial of Service ReDoS vulnerability in the UtilescapeElement method...

Astra Linux – Vulnerability in node-cookiejar

Versions of the package cookiejar before 2.1.4 are vulnerable to Regular Expression Denial of Service ReDoS attacks through the Cookie.parse function, which uses an insecure regular expression...

Astra Linux – Vulnerability in Python-Django

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are vulnerable to a ReDoS regular expression denial of service attack due to a very large number of domain name labels for emails and URLs...

Astra Linux – Vulnerability in Rails

The PostgreSQL adapter in Active Record before versions 6.1.2.1, 6.0.3.5, and 5.2.4.5 is vulnerable to a regular expression denial of service REDoS vulnerability. Carefully crafted inputs can cause the input validation for the money type in the PostgreSQL adapter in Active Record to spend too muc...

Astra Linux – Vulnerability in node-hosted-git-info

Packages that use hosted-git-info before version 3.0.8 are vulnerable to Regular Expression Denial of Service ReDoS attacks due to the regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expressions have a polynomial worst-case time complexity...