CWE-1333: ReDoS
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Also known as Inefficient Regular Expression Complexity, Regular Expression Denial of Service, Catastrophic backtracking.
A kind of CWE-407 Inefficient Algorithmic Complexity.
From the CWE List. © The MITRE Corporation.
Newest
- splunk supporting add-on for active directoryRegular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)6.5 Medium
parse-urinpm,parseurinpm +1 moreparse-uri Regular expression Denial of Service (ReDoS)6.5 Medium- No product listedAn issue in the validate_email function in CTFd/utils/validators/__init__.py of CTFd 3.7.3 allows...7.5 High
- ibm engineering lifecycle optimization publishingIBM Engineering Lifecycle Optimization - Publishing denial of service7.5 High
- golang.org/x/net golang.org/x/net/htmlNon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 Medium
- path-to-regexppath-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x7.7 High
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp...4.3 Medium
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +4 more +6 moreOrg.keycloak:keycloak-services: keycloak denial of service6.5 Medium
- eslint rewriteRegular Expression Denial of Service (ReDoS) in @eslint/plugin-kit8.7 High
- giskard-ai giskardReDoS in Giskard Scan text perturbation6.9 Medium
- cross-spawnRegular Expression Denial of Service (ReDoS) in cross-spawn8.7 High
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreRexml: rexml: denial of service via inefficient regex parsing7.5 High
- ruby rexml, netapp ontap tools +1 moreREXML ReDoS vulnerability6.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header...5.3 Medium
- 3rd-eden useragentGHSL-2020-312: Regular Expression Denial of Service (ReDoS) in useragent8.7 High
- blowsie pure javascript html5 parser, pure-javascript-html5-parser +1 moreGHSL-2020-305: Regular Expression Denial of Service (ReDoS) in Pure JavaScript HTML5 Parser8.7 High
- ftonato nope-validatorGHSL-2020-303: Regular Expression Denial of Service (ReDoS) in nope-validator8.7 High
- ansman validate.jsGHSL-2020-302: Regular Expression Denial of Service (ReDoS) in validate.js8.7 High
- kates html2markdownGHSL-2020-301: Regular Expression Denial of Service (ReDoS) in HTML2Markdown8.7 High
- benhmoore knwlGHSL-2020-296: Regular Expression Denial of Service (ReDoS) in Knwl.js8.7 High
- talyssonoc commonregexjsGHSL-2020-291: Regular Expression Denial of Service (ReDoS) in CommonRegexJS8.7 High
- foundation, foundation foundation-sites +1 moreGHSL-2020-290: Regular Expression Denial of Service (ReDoS) in foundation-sites8.7 High
- bevacqua insaneGHSL-2020-289: Regular Expression Denial of Service (ReDoS) in insane8.7 High
github.com/facebookincubator/tacquitoGoPermissive Regular Expression in tacquito7.1 High- railsAction Mailer has possible ReDoS vulnerability in block_format6.6 Medium
- railsAction Text has possible ReDoS vulnerability in plain_text_for_blockquote_node6.6 Medium
- railsAction Controller has possible ReDoS vulnerability in HTTP Token authentication6.6 Medium
- @clerk vueRegular Expression Denial of Service (ReDoS)3.7 Low
- znunyZnuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email....7.5 High
- xhtml2pdfxhtml2pdf Denial of Service via crafted string7.5 High
- langflowLangflow HTTP POST Request utils.py redos5.1 Medium
- vmware spring frameworkSpring Framework DoS via conditional HTTP request5.3 Medium
- delvedor find-my-wayReDoS vulnerability in multiparametric routes in find-my-way5.3 Medium
- gitlabInefficient Regular Expression Complexity in GitLab7.5 High
- path-to-regexppath-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters7.5 High
- path-to-regexppath-to-regexp outputs backtracking regular expressions7.5 High
- python cpython, python +1 moreRegular-expression DoS when parsing TarFile headers7.5 High
- nescalante urlregexnescalante urlregex Backtracking index.js redos5.3 Medium
- secure systems engineering connaisseurSecure Systems Engineering Connaisseur Delegation Name targets_schema.json redos2.1 Low
- python cpython, python +1 moreQuadratic complexity parsing cookies with backslashes7.5 High
- gitlabUncontrolled Resource Consumption in GitLab6.5 Medium
- gitlabUncontrolled Resource Consumption in GitLab4.3 Medium
- djangoproject djangoDjango vulnerable to denial-of-service attack7.5 High
- naturalintelligence fast-xml-parser, fast xml parser +1 moreReDOS at currency parsing fast-xml-parser7.5 High
- danocmx node-tf2-item-formatTF2 Item Format Regular Expression Denial of Service vulnerability7.5 High
- torchbox wagtailWagtail regular expression denial-of-service via search query parsing6.5 Medium
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.10.35 - Regular Expressions Denial of Service3.1 Low
- rackRack ReDoS Vulnerability in HTTP Accept Headers Parsing6.5 Medium
- async project asyncAsync <= 2.6.4 and <= 3.2.5 are vulnerable to ReDoS (Regular Expression Denial of Service) while...7.5 High
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreReDoS Vulnerability in gaizhenbiao/chuanhuchatgpt7.5 High
- Show moreLoading…