CWE-1333: ReDoS
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Also known as Inefficient Regular Expression Complexity, Regular Expression Denial of Service, Catastrophic backtracking.
A kind of CWE-407 Inefficient Algorithmic Complexity.
From the CWE List. © The MITRE Corporation.
Newest
- stealjs stealsteal vulnerable to Regular Expression Denial of Service via input variable7.5 High
- stealjs stealsteal vulnerable to Regular Expression Denial of Service via source and sourceWithComments7.5 High
- sqlalchemy mako, debian linux +1 moremako is vulnerable to Regular Expression Denial of Service7.5 High
- ericcornelissen shescapeShescape Inefficient Regular Expression Complexity vulnerability5.9 Medium
- apache ofbizRegular Expression Denial of Service (ReDoS) vulnerability in Apache OFBiz7.5 High
- apostrophecms sanitize-htmlRegular Expression Denial of Service (ReDoS)5.3 Medium
- cainthebest nitrado.jsPossible Regular Expression Denial of Service (ReDoS) used on uncontrolled data in nitrado.js7.5 High
- litejs uri-template-liteReDoS in uri-template-lite URI.expand function5.9 Medium
- eth-accountReDoS in eth-account encode_structured_data function5.9 Medium
- imbrn v8nInefficient Regular Expression Complexity in v8n7.5 High
- node-fetch node-fetch/node-fetch, node-fetch project node-fetch +1 moreInefficient Regular Expression Complexity in node-fetch/node-fetch5.9 Medium
- mistune project mistune, fedoraproject fedora +1 moreMistune vulnerable to catastrophic backtracking7.5 High
- gulpjs glob-parentglob-parent 6.0.0 vulnerable to Regular Expression Denial of Service7.5 High
- terserRegular Expression Denial of Service (ReDoS)5.3 Medium
- apache tapestryRegular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022)7.5 High
- moment, debian linux, fedoraproject fedora +2 moreInefficient Regular Expression Complexity in moment7.5 High
- jquery-validation, jqueryvalidation jquery validation +1 morejquery-validation ReDoS in url2 due to incomplete fix of CVE-2021-433067.5 High
- scss-tokenizer project scss-tokenizerRegular Expression Denial of Service (ReDoS)5.3 Medium
- gitlabA Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from...4.3 Medium
- scniro-validator project scniro-validatorA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scniro-validator...7.5 High
- regexfn project regexfnA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in regexfn v1.0.5...7.5 High
- repo-git-downloader project repo-git-downloaderA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in repo-git...7.5 High
- scaffold-helper project scaffold-helperA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scaffold-helper v1...7.5 High
- split-html-to-chars project split-html-to-charsA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in split-html-to...7.5 High
- that-value project that-valueA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in that-value v0.1.3...7.5 High
- todo-regex project todo-regexA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in todo-regex v0.1.1...7.5 High
- underscore-99xp project underscore-99xpA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in underscore-99xp v1...7.5 High
- validate data project dataA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in validate-data v0.1...7.5 High
- validate color project colorA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in validate-color v2...7.5 High
- diygod rsshubDenial of Service (DoS) vulnerability in RSSHub5.3 Medium
- javadelight nashorn sandboxRegular expression denial of service in Delight Nashorn Sandbox7.5 High
- bigbluebuttonReDoS on endpoint html5client/useragent in BigBlueButton7.5 High
- devcertExponential ReDoS in devcert5.9 Medium
- markdown-link-extractorExponential ReDoS in markdown-link-extractor5.9 Medium
- semver-regexExponential ReDoS in semver-regex5.9 Medium
- jquery-validation, jqueryvalidation jquery validation +1 moreExponential ReDoS in jquery-validation5.9 Medium
- apache tikaMissing fix for CVE-2022-30126 in 1.28.25.5 Medium
- rack project rack, debian linux +1 moreDenial of Service Vulnerability in Rack Multipart Parsing7.5 High
- url-regex project url-regexRegular Expression Denial of Service (ReDoS)5.3 Medium
- apache shenyu, apache software foundation shenyu (incubating) +1 moreApache ShenYu (incubating) Regular expression denial of service7.5 High
- apache tika, oracle primavera unifier +1 moreApache Tika Regular Expression Denial of Service in Standards Extractor5.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6,...6.5 Medium
- mozilla hawkReDoS vulnerability in header parsing in hawk7.4 High
- angular, angularjs, fedoraproject fedora +1 more +3 moreRegular Expression Denial of Service (ReDoS)5.3 Medium
- nokogiri, apple macos, debian linux +1 more +3 moreInefficient Regular Expression Complexity in Nokogiri7.5 High
- apache dolphinschedulerApache DolphinScheduler user registration is vulnerable to ReDoS attacks7.5 High
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreRegular expression Denial of Service in dialog plugin6.5 Medium
- rust-lang regex, debian linux, fedoraproject fedora +2 moreRegular expression denial of service in Rust's regex crate7.5 High
- marked project marked, fedoraproject fedora +1 moreExponential catastrophic backtracking (ReDoS) in marked7.5 High
- marked project marked, fedoraproject fedora +1 moreCubic catastrophic backtracking (ReDoS) in marked7.5 High
- Show moreLoading…