25122 matches found
@devsoutinho/alfred-currency-converter (>=2.0.0, <=2.1.1), @felixcatto/ui (>=0.0.14, <=0.0.32) +13 more potentially affected by CVE-2025-45143 via string-math (1.2.2)
string-math NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on string-math and may be impacted: - @devsoutinho/alfred-currency-converter =2.0.0, =0.0.14, =0.4.0-beta.2, =1.5.12, =0.1.47, =0.0.32, =2.0.0, =4.0.0, =1.0.0, =1.2.0, =1.0.8,...
string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS)
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
CVE-2025-45143
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
CVE-2025-45143
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
CVE-2025-45143
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
CVE-2025-45143
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
CVE-2025-45143
The string-math library (version 1.2.2 ) is vulnerable to a Regex Denial of Service (ReDoS) . This vulnerability is caused by inefficient regular expression processing, which allows an attacker to trigger a denial of service by providing a crafted input . Several packages, including @devsoutinho/...
CVE-2025-45143
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
CVE-2025-45143: Inefficient Regular Expression Complexity
string-math v1.2.2 was discovered to contain a Regex Denial of Service ReDoS which is exploited via a crafted input...
PT-2025-27455
Name of the Vulnerable Software and Affected Versions: string-math version 1.2.2 Description: The issue is a Regex Denial of Service ReDoS that can be exploited via a crafted input. Recommendations: For string-math version 1.2.2, consider validating and sanitizing all inputs to prevent crafted...
string-math security vulnerabilities
string-math is a module function for calculating results based on arithmetic formulas by the Polish individual developer devrafalko. A security vulnerability exists in string-math version 1.2.2, which stems from improper handling of regular expressions and could lead to a regular expression denia...
CVE-2025-6522
Unauthenticated users on an adjacent network with the Sight Bulb Pro can run shell commands as root through a vulnerable proprietary TCP protocol available on Port 16668. This vulnerability allows an attacker to run arbitrary commands on the Sight Bulb Pro by passing a well formed JSON string...
GHSA-WR3V-9P2C-CHX7
creationtimestamp| type| source ---|---|--- 2025-06-27 16:57:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19752...
Fedora 42 : perl-String-Compare-ConstantTime (2025-ce51c124a5)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ce51c124a5 advisory. This release fixes CVE-2024-13939 leaking the length of a secret string Tenable has extracted the preceding description block directly from the Fedora securi...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure via the execute function in the CliRuntimeRunner.java file, which is included in a command string and may be exposed in an error message if a command is not found. An attacker can obtain sensitive credential...
[SECURITY] Fedora 41 Update: qt6-qtbase-6.8.3-2.fc41
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
SUSE CVE-2025-6428
When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. This bug only affects Firefox for Android. Other versions of Firefox are unaffected.. This vulnerability was fixed in Firefox 140...
CLSA-2025-1750785256 curl: Fix of CVE-2024-7264
CVE-2024-7264: fix out-of-bound read in GTime2str function...
Mozilla Firefox security vulnerabilities
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An open redirect vulnerability exists in Mozilla Firefox for Android, which can be exploited by an attacker to conduct a phishing attack by opening a link to the URL specified in the query string...