Lucene search
Veracode Vulnerability DatabaseVERACODE:29696HistoryMar 15, 2021 - 6:24 a.m.
Regular Expression Denial Of Service (ReDoS)
2021-03-1506:24:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
redos
is-svg vulnerability
insecure regular expression
application crash
malicious svg/xml document
software
EPSS
0.002
Percentile
59.2%
is-svg is vulnerable to regular expression denial of service. An attacker is able to crash the application via a malicious SVG/XML document due to the usage of an insecure regular expression.
Related
github
github
Regular Expression Denial of Service (ReDoS)
2021-03-19 21:25:50
cvelist
cvelist
CVE-2021-28092
2021-03-12 21:31:35
osv
osv
CVE-2021-28092
2021-03-12 22:15:14
Regular Expression Denial of Service (ReDoS)
2021-03-19 21:25:50
redhatcve
redhatcve
CVE-2021-28092
2021-03-15 16:32:10
prion
prion
Design/Logic Flaw
2021-03-12 22:15:00
nvd
nvd
CVE-2021-28092
2021-03-12 22:15:14
cve
cve
CVE-2021-28092
2021-03-12 22:15:14
ibm
ibm
redhat
redhat
kitploit
kitploit