CWE-1333: ReDoS
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Also known as Inefficient Regular Expression Complexity, Regular Expression Denial of Service, Catastrophic backtracking.
A kind of CWE-407 Inefficient Algorithmic Complexity.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla bleachregular expression denial-of-service (ReDoS) in Bleach7.5 High
- ua-parser uap-coreDenial of Service in uap-core when processing crafted User-Agent strings5.7 Medium
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreInefficient Regular Expression Complexity in Jenkins Build Failure Analyzer Plugin6.5 Medium
- zulip serverThe Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to...6.5 Medium
- angular, google angularjs, angularjs angular.js +2 moreCross-Site Scripting via JSONP7.5 High
- angular, angularjs, fedoraproject fedora +2 moreCross-Site Scripting via JSONP5.3 Medium
- angular, angularjs, fedoraproject fedora +2 moreCross-Site Scripting via JSONP5.3 Medium
- angular, angularjs, fedoraproject fedora +2 moreCross-Site Scripting via JSONP5.3 Medium
- kpdecker jsdiff, red hat satellite 6 +1 morejsdiff has a Denial of Service vulnerability in parsePatch and applyPatch2.7 Low
clean-cssnpmRegular Expression Denial of Service in clean-cssNo score- cure53 dompurifyTampering by prototype polution in DOMPurify7.3 High
- microsoft .net core, .net framework, .net framework 2.0 +44 more +46 moreRegular Expression Denial of Service in System.Text.RegularExpressions7.5 High
- remarkable project remarkableRegular Expression Denial of Service in remarkable7.5 High
- highchartsRegular Expression Denial of Service in Acorn7.5 High
- salesforce tough-cookie, ibm api connect, redhat openshift container platform +2 moreReDoS via long string of semicolons in tough-cookie5.3 Medium
- protobufjs project protobufjs, hackerone protobufjs node module +1 moreDenial of Service in protobufjs5.5 Medium
- garycourt uri-js, hackerone uri-js node module +1 moreRegular Expression Denial Of Service in uri-js6.5 Medium
- brace expansion project expansionReDoS in brace-expansion7.5 High
- uglifyjs project uglifyjsRegular Expression Denial of Service in uglify-js7.5 High
- nodejs node.jsRegular Expression Denial of Service in semver7.5 High
- marked project marked, fedoraproject fedora +1 moreRegular Expression Denial of Service in marked7.5 High
- vercel msRegular Expression Denial of Service in ms7.5 High
- hawk project hawkRegular Expression Denial of Service in hawk7.5 High
- is my json valid project my json validRegular Expression Denial of Service in is-my-json-valid7.5 High
- djangoproject djangoDjango ReDoS in validators.URLValidator7.8 High
- djangoproject djangoDjango Regex Algorithmic Complexity Causes Denial of Service5.0 Medium
- sun jdkSpring Framework Inefficient Regular Expression Complexity5.0 Medium