CWE-1333: ReDoS
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Also known as Inefficient Regular Expression Complexity, Regular Expression Denial of Service, Catastrophic backtracking.
A kind of CWE-407 Inefficient Algorithmic Complexity.
From the CWE List. © The MITRE Corporation.
Newest
- html-stripscripts project html-stripscripts, debian linux +1 moreThe HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of...7.5 High
- rackDenial of Service Vulnerability in Rack Content-Disposition parsing7.5 High
- rails https://github.com/rails/rails, rubyonrails rails +1 moreReDoS based DoS vulnerability in Action Dispatch7.5 High
- activesupport project activesupport, rails https://github.com/rails/rails +1 moreReDoS based DoS vulnerability in Active Support's underscore7.5 High
- debian linux, rails https://github.com/rails/rails, rubyonrails rails +2 moreReDoS based DoS vulnerability in Action Dispatch7.5 High
- rackDenial of service via header parsing in Rack7.5 High
- rackDenial of service via multipart parsing in Rack7.5 High
- rubyonrails globalidReDoS based DoS vulnerability in GlobalID7.5 High
- cookiejar project cookiejarcookiejar Regular Expression Denial of Service via Cookie.parse function5.3 Medium
- mel-spintax project mel-spintaxmelnaron mel-spintax spintax.js redos3.5 Low
- libsisimai sisimaiSisimai string.rb to_plain redos3.5 Low
- mechanize project mechanizemechanize vulnerable to ReDoS7.5 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15...4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5...4.3 Medium
- prestaul skeemasPrestaul skeemas base.js redos3.5 Low
- debug-js debugdebug-js debug node.js useColors redos3.5 Low
- cronvel terminal-kitcronvel terminal-kit redos3.5 Low
- vercel msvercel ms index.js parse redos4.3 Medium
- bridgeline robots-txt-guardWoorank robots-txt-guard patterns.js makePathPattern redos3.5 Low
- discourseDiscourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 2.9.0.beta16 on the beta and tests-passed branches, parsing posts can be susceptible to regu…6.5 Medium
- moment luxonluxon.js inefficient regular expression complexity vulnerability7.5 High
- mootools, mootools mootools-core +1 moreRegular expression Denial of Service in MooTools6.2 Medium
- cronvel string-kit, string kit project kit +1 morecronvel string-kit naturalSort.js naturalSort redos4.3 Medium
- rgb2hex project rgb2hexrgb2hex redos4.3 Medium
- email-existence project email-existenceemail-existence index.js redos3.0 Low
- markdown-itmarkdown-it html_re.js redos3.5 Low
- arasatasaygin is.jsis_js vulnerable to Regular Expression Denial of Service7.5 High
- wheel project wheelpypa/wheel vulnerable to Regular Expression denial of service (ReDoS)7.5 High
- python setuptoolspypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)5.9 Medium
- rails rails-html-sanitizer, debian linux, rubyonrails rails html sanitizers +2 moreInefficient Regular Expression Complexity in rails-html-sanitizer7.5 High
- flavorjones loofahInefficient Regular Expression Complexity in Loofah7.5 High
- liferay portal, digital experience platform +1 moreInefficient Regular Expression Complexity in Liferay Portal7.5 High
- cleoExponential ReDoS in cleo leads to denial of service5.9 Medium
- snowflake connector, snowflake-connector-python +1 moreExponential ReDoS in snowflake-connector-python leads to denial of service3.7 Low
- materialsproject pymatgenExponential ReDoS in pymatgen leads to denial of service5.9 Medium
- kangax html-minifier, terser html-minifier-terser +1 morekangax html-minifier REDoS vulnerability7.5 High
- ericcornelissen shescapeRegular Expression Denial of Service (ReDoS)5.3 Medium
- isaacs minimatch, debian linux, fedoraproject fedora +2 moreminimatch ReDoS vulnerability7.5 High
- gitlabA potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before...4.3 Medium
- pytest pyWithdrawn Advisory: ReDoS in py library when used with subversion5.3 Medium
- webpack.js loader-utilsloader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable7.5 High
- webpack.js loader-utilsloader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)7.5 High
- dell wyse thinos, wyse proprietary os (modern thinos) +1 moreDell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An...6.8 Medium
- djangoproject djangoDjango denial-of-service vulnerability in internationalized URLs7.5 High
- dell hybrid client, hybrid client (dhc) +1 moreDell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service...5.0 Medium
- css-what project css-whatRegular Expression Denial of Service (ReDoS)5.3 Medium
- swmansion react native reanimatedRegular Expression Denial of Service (ReDoS)5.3 Medium
d3-colornpm,@rootio/d3-colorRoot +1 mored3-color vulnerable to ReDoSNo score- pyupio dparse, pyup dependency parser +1 moreRegular expression denial of service in dparse5.9 Medium
- stealjs stealsteal Inefficient Regular Expression Complexity vulnerability via string variable7.5 High
- Show moreLoading…