CWE-1333: ReDoS
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Also known as Inefficient Regular Expression Complexity, Regular Expression Denial of Service, Catastrophic backtracking.
A kind of CWE-407 Inefficient Algorithmic Complexity.
From the CWE List. © The MITRE Corporation.
Newest
- markdown-itUncontrolled Resource Consumption in markdown-it5.3 Medium
- digitalbazaar forgeForge: Regular expression denial of service in PEM decoding (pem.decode)7.5 High
- nltk, nltk nltk/nltk, debian linux +1 more +3 moreInefficient Regular Expression Complexity in nltk/nltk7.5 High
- parse-link-header project parse-link-headerRegular Expression Denial of Service (ReDoS)7.5 High
- circl cve-searchlib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can...7.5 High
- jsx-slack project jsx-slackInsufficient patch for Regular Expression Denial of Service (ReDoS) to jsx-slack v4.5.15.3 Medium
- jsx-slack project jsx-slackRegular Expression Denial of Service (ReDoS) in jsx-slack5.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14...4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14...4.3 Medium
- nebulab solidusReDos vulnerability on guest checkout email validation7.5 High
- python-ldapDenial of Service in python-ldap6.5 Medium
validatornpm,@rootio/validatorRoot +1 moreInefficient Regular Expression Complexity in Validator.js5.3 Medium- ruby-lang date, ruby, debian linux +6 more +8 moreRegular expression denial of service vulnerability (ReDoS) in date7.5 High
- validator project validator, validatorjs validatorjs/validator.js +1 moreInefficient Regular Expression Complexity in validatorjs/validator.js5.3 Medium
- gjson project gjsongithub.com/tidwall/gjson Vulnerable to REDoS attack7.5 High
- zulipRegular expression denial-of-service in Zulip4.3 Medium
- handsontableRegular Expression Denial of Service (ReDoS)7.5 High
- nltk, nltk nltk/nltk +1 moreInefficient Regular Expression Complexity in nltk/nltk7.5 High
- josdejong josdejong/jsoneditor, jsoneditoronline jsoneditor +1 moreInefficient Regular Expression Complexity in josdejong/jsoneditor5.3 Medium
- inflect project inflect, pksunkara pksunkara/inflect +1 moreInefficient Regular Expression Complexity in pksunkara/inflect5.3 Medium
millisecondnpmRegular Expression Denial of Service in millisecondNo score- leoeditor leoRegular Expression Denial of Service in Leo Editor7.5 High
- cdr cdr/code-server, coder code-server +1 moreInefficient Regular Expression Complexity in cdr/code-server7.5 High
- nervjs nervjs/taro, taro +1 moreInefficient Regular Expression Complexity in nervjs/taro7.5 High
- ansi-regex project ansi-regex, chalk chalk/ansi-regex, oracle communications cloud native core policy +2 moreInefficient Regular Expression Complexity in chalk/ansi-regex7.5 High
- fb55 fb55/nth-check, nth-check project nth-check, debian linux +2 moreInefficient Regular Expression Complexity in fb55/nth-check7.5 High
- semver-regex project semver-regex, sindresorhus sindresorhus/semver-regex +1 moreInefficient Regular Expression Complexity in sindresorhus/semver-regex7.5 High
- prismjs prism, prismjs/prism +1 moreInefficient Regular Expression Complexity in prismjs/prism7.5 High
- vuelidate vuelidate/vuelidate, vuelidate project vuelidate +1 moreInefficient Regular Expression Complexity in vuelidate/vuelidate7.5 High
- daaku daaku/nodejs-tmpl, tmpl project tmpl +1 moreInefficient Regular Expression Complexity in daaku/nodejs-tmpl7.5 High
- flask-restx project flask-restx, fedoraproject fedora +1 moreRegular Expression Denial of Service in flask-restx7.5 High
- axios, axios axios/axios, oracle goldengate +1 more +3 moreInefficient Regular Expression Complexity in axios/axios7.5 High
- chatwoot, chatwoot chatwoot/chatwoot +1 moreInefficient Regular Expression Complexity in chatwoot/chatwoot7.5 High
- addressable project addressable, fedoraproject fedora +1 moreRegular Expression Denial of Service in Addressable templates7.5 High
- facebook react-nativeRegular expression denial of service in react-native7.5 High
- normalize-url project normalize-urlReDoS in normalize-url7.5 High
- browserslist project browserslistRegular Expression Denial of Service (ReDoS)5.3 Medium
- postcssRegular Expression Denial of Service (ReDoS)5.3 Medium
- npmjs hosted-git-info, siemens sinec infrastructure network services +1 moreRegular Expression Denial of Service (ReDoS)5.3 Medium
- pygments, debian linux, fedoraproject fedora +2 morePygments vulnerable to Regular Expression Denial of Service (ReDoS)7.5 High
- is-svg project is-svgRegular Expression Denial of Service (ReDoS)7.5 High
- adaltas printfRegular Expression Denial of Service (ReDoS)5.3 Medium
- markdown2 project markdown2, fedoraproject fedora +1 moremarkdown2 Regular Expression Denial of Service7.5 High
- python pillowRegular Expression Denial of Service (ReDoS) in Pillow6.5 Medium
- lodash, oracle banking corporate lending process management, banking credit facilities process management +16 more +18 moreRegular Expression Denial of Service (ReDoS)5.3 Medium
- ua-parser uap-coreDenial of Service in uap-core5.3 Medium
- ckeditor, oracle agile product lifecycle management, application express +4 more +6 moreCKEditor 4 ReDoS Vulnerability6.5 Medium
- predefine project predefinePrototype pollution vulnerability in 'predefine'9.8 Critical
- mholt papaparsemholt PapaParse papaparse.js redos3.5 Low
markednpmRegular Expression Denial of Service in markedNo score- Show moreLoading…