Inefficient Regular Expression Complexity in validatorjs/validator.js

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in validator. It allows cause a denial of service when validating crafted invalid MagnetURIs. The ReDoS vulnerability is mainly due to the sub-pattern .+&tr=.+ with quantified overlapping adjacency and c...

CVE-2021-3804

taro is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3810

code-server is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3804

taro is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

DEBIAN-CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

nth-check is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

taro is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3810

code-server is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3804

taro is vulnerable to Inefficient Regular Expression Complexity...

UBUNTU-CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

UBUNTU-CVE-2021-3807

ansi-regex is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3803

nth-check is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

code-server is vulnerable to Inefficient Regular Expression Complexity...

Inefficient Regular Expression Complexity in isaacs/minimatch

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in minimatch. It allows cause a denial of service when calling function braceExpand. The ReDoS vulnerability is mainly due to the regex /./ and can be exploited with the following code. Proof of Concept...