CWE-1333: ReDoS
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Also known as Inefficient Regular Expression Complexity, Regular Expression Denial of Service, Catastrophic backtracking.
A kind of CWE-407 Inefficient Algorithmic Complexity.
From the CWE List. © The MITRE Corporation.
Newest
- colinhacks zodZod 3.22.2 - Regular expression Denial of Service7.5 High
- chaijs get-func-nameInefficient Regular Expression Complexity in get-func-name8.6 High
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- adobe css-tools, not a product +1 moreDenial of Service of regular expression in package @adobe/css-tools5.3 Medium
- mathjaxMathJax Regular expression Denial of Service (ReDoS)7.5 High
- synck graphica mailform pro cgiRegular expression Denial-of-Service (ReDoS) exists in multiple add-ons for Mailform Pro CGI 4.3...7.5 High
- gitlabInefficient Regular Expression Complexity in GitLab7.5 High
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- gitlabInefficient Regular Expression Complexity in GitLab7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue...4.3 Medium
- openssl, siemens sidis prime, simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreExcessive time spent checking DH keys and parameters5.3 Medium
- gitlabInefficient Regular Expression Complexity in GitLab7.5 High
- apache airflowApache Airflow: ReDoS via dags function6.5 Medium
- djangoproject django, debian linux, fedoraproject fedora +2 moreDjango has regular expression denial of service vulnerability in EmailValidator/URLValidator7.5 High
- synck mailform pro cgiMailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial...7.5 High
- ruby-lang uriURI gem has ReDoS vulnerability5.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1,...6.5 Medium
- word-wrap project word-wrapword-wrap vulnerable to Regular Expression Denial of Service5.3 Medium
- npmjs semversemver vulnerable to Regular Expression Denial of Service5.3 Medium
- urlnorm project urlnormWithdrawn Advisory: urlnorm vulnerable to Regular Expression Denial of Service7.5 High
- git-url-parse project git-url-parsegit-url-parse crate vulnerable to Regular Expression Denial of Service7.5 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.0 before 15...7.5 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 8.7 before 15...7.5 High
- naturalintelligence fast-xml-parserRegex Injection via Doctype Entities7.5 High
- promptworks redclothRedCloth Regular Expression Denial of Service issue7.5 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15...7.5 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal has Inefficient Regular Expression6.5 Medium
- coala git-url-parsegit-url-parse Regular Expression Denial of Service7.5 High
- puppet server, perforce puppet enterprise, puppet enterprise +2 moreA Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2...5.3 Medium
- denosaurs emojiDenosaurs emoji has ReDoS vulnerability in `replace` function5.3 Medium
- andialbrecht sqlparse, debian linux +1 moreParser contains an inefficient regular expression in sqlparse5.5 Medium
- voidtools everythingVoid Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression...5.5 Medium
- configobj project configobjconfigobj ReDoS exploitable by developer using values in a server-side configuration file3.7 Low
- ruby-lang ruby, time, debian linux +1 more +3 moreRuby Time component ReDoS issue5.3 Medium
- ruby-lang uri, debian linux, fedoraproject fedora +2 moreRuby URI component ReDoS issue5.3 Medium
- denoRegular Expression Denial of Service in Deno.upgradeWebSocket API5.3 Medium
- octoboxOctobox ReDoS vulnerability7.5 High
- nodejs undiciUndici vulnerable to Regular Expression Denial of Service in Headers7.5 High
- kong lua-multipart, konghq multipart +1 moreKong lua-multipart multipart.lua is_header redos3.5 Low
- khanacademy simple-markdownsimple-markdown simple-markdown.js redos4.3 Medium
- khanacademy simple-markdownsimple-markdown simple-markdown.js redos4.3 Medium
cacheable-requestRoot,@rootio/cacheable-requestRoot +1 moreWithdrawn: cacheable-request depends on http-cache-semantics, which is vulnerable to Regular Expression Denial of Service7.5 High- discourseRegular expression denial of service via installing themes via git in discourse6.5 Medium
- awordpresslife formulaRegular Expression Denial of Service (ReDoS) Vulnerability5.5 Medium
- segment is-urlSegmentio is-url index.js redos4.3 Medium
- switcherapi switcher client, switcher-client-master +1 moreSwitcher Client contains Regular Expression Denial of Service (ReDoS)8.6 High
- http-cache-semantics project http-cache-semanticshttp-cache-semantics vulnerable to Regular Expression Denial of Service5.3 Medium
- discourseDiscourse vulnerable to ReDoS in user agent parsing8.6 High
- ua-parser-js project ua-parser-jsReDoS Vulnerability in ua-parser-js version5.3 Medium
- Show moreLoading…