CWE-1333: ReDoS
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Also known as Inefficient Regular Expression Complexity, Regular Expression Denial of Service, Catastrophic backtracking.
A kind of CWE-407 Inefficient Algorithmic Complexity.
From the CWE List. © The MITRE Corporation.
Newest
- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
ua-parser/uap-phpPackagistua-parser/uap-php ReDoS vulnerabilityNo score- kubeflow, kubeflow kubeflow/kubeflow +1 moreReDoS in kubeflow/kubeflow7.5 High
- lunary, lunary-ai lunary-ai/lunary +1 moreRedos (Regular Expression Denial of Service) in lunary-ai/lunary7.5 High
symfony/symfonyPackagist,symfony/http-foundationPackagist +1 moreSymfony vulnerable to denial of service via a malicious HTTP Host header7.5 High- gitlabInefficient Regular Expression Complexity in GitLab4.3 Medium
- jonschlinkert micromatchRegular Expression Denial of Service in micromatch5.3 Medium
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- openstack solum-yoga-eomAn issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via...7.5 High
- m-files serverDenial of service condition in M-Files Server7.5 High
- gitlabInefficient Regular Expression Complexity in GitLab7.5 High
- tcpdf project tcpdf, fedoraproject fedora +1 moreTCPDF vulnerable to Regular Expression Denial of Service7.5 High
- pydantic, fedoraproject fedora +1 moreRegular expression denial of service in Pydantic < 2.4.05.9 Medium
- gitlabInefficient Regular Expression Complexity in GitLab4.3 Medium
- gitlabInefficient Regular Expression Complexity in GitLab4.3 Medium
- kjd kjd/idna, internationalized domain names in applications +1 moreDenial of Service via Quadratic Complexity in kjd/idna6.2 Medium
- sheetjs community editionSheetJS Regular Expression Denial of Service (ReDoS)7.5 High
- npmjs domain-suffixdomain-suffix RegEx Denial of Service7.5 High
- psf blackBlack vulnerable to Regular Expression Denial of Service (ReDoS)5.3 Medium
- ilicmiljan secureprops, secure-props +1 more[TagAwareCipher] - Decryption Failure (Regex Match)2.6 Low
- django-wikidjango-wiki denial of service via regular expression7.5 High
- djangoproject django, django-rest-framework django rest framework +1 moreRegular expression denial-of-service in Django5.3 Medium
- rack, debian linux +1 moreRack ReDos in content type parsing (2nd degree polynomial)5.3 Medium
- rack, debian linux +1 morePossible Denial of Service Vulnerability in Rack Header Parsing5.3 Medium
- railsRails possible ReDoS vulnerability in Accept header parsing in Action Dispatch7.5 High
- medikoo es5-extes5-ext Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`0.0 None
- alanclarke urliteAn issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service (DoS) via a...7.5 High
- scrapy, scrapy scrapy/scrapy +1 moreReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider7.5 High
- dbartholomae lambda-middleware, lambda-middleware frameguard +1 moredbartholomae lambda-middleware frameguard JSON Mime-Type JsonDeserializer.ts redos3.5 Low
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- fastapiexpert python-multipart, encode starlette, tiangolo fastapi +2 morepython-multipart vulnerable to content-type header Regular expression Denial of Service7.5 High
- nodemailernodemailer before 6.9.9 ReDoS via attachDataUrls parameter6.9 Medium
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- embedchainReDoS in Embedchain7.5 High
- heimdalsecurity thorAn issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and...9.1 Critical
- heimdalsecurity thorAn issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows...9.8 Critical
- getsentry sentry-javascript, sentry astro +1 moreSentry's Astro SDK vulnerable to ReDoS7.5 High
- adobe css-tools, not a product +1 moreDenial of Service of regular expression in package @adobe/css-tools5.3 Medium
- git-urls project git-urlsInefficient Regular Expression Complexity in git-urls7.5 High
- discourseDiscourse vulnerable to DoS via Regexp Injection in Full Name4.3 Medium
- gitlabInefficient Regular Expression Complexity in GitLab4.3 Medium
- teomantuncer node email checkInefficient Regular Expression Complexity in node-email-check7.5 High
- dedsecinside torbot, validators project validators +1 moreInefficient Regular Expression Complexity in TorBot4.6 Medium
express-zod-apinpmZod denial of service vulnerability during email validation7.5 High- gitlabImproper Validation of Specified Type of Input in GitLab3.5 Low
- Show moreLoading…