CWE-1333: ReDoS
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Also known as Inefficient Regular Expression Complexity, Regular Expression Denial of Service, Catastrophic backtracking.
A kind of CWE-407 Inefficient Algorithmic Complexity.
From the CWE List. © The MITRE Corporation.
Newest
- powsybl powsybl-corePowSyBl Core Contains a Polynomial ReDoS in RegexCriterion2.7 Low
- powsybl powsybl-corePowSyBl Core contains Polynomial REDoS’es6.3 Medium
- python software foundation cpythonHTMLParser quadratic complexity when processing malformed inputs4.3 Medium
- vuejs vue-cli, vue cli +1 morevuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redos5.3 Medium
- tarotarojs taro index.js redos5.3 Medium
- metabaseMetabase dom.js parseDataUri redos5.3 Medium
- rocket.chatRocketChat parseMessage.js parseMessage redos5.3 Medium
- keymetric pm2Unitech pm2 Config.js redos5.3 Medium
- actions toolkitactions toolkit glob internal-pattern.ts globEscape redos5.3 Medium
- juliangruber brace-expansionjuliangruber brace-expansion index.js expand redos2.3 Low
- rackReDoS Vulnerability in Rack::Multipart handle_mime_head6.6 Medium
- vllmvllm - Regular Expression Denial of Service in Multiple Components5.3 Medium
- vllmvLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`6.5 Medium
- marked project markedRegular Expression Denial of Service (ReDoS) in markedjs/marked6.9 Medium
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- meteorMeteor livedata_server.js Object.assign redos6.3 Medium
- combodo itopiTop Inefficient Regular Expression Complexity vulnerability5.3 Medium
- gorhill ublock origin, debian linux +1 moregorhill uBlock Origin UI 1p-filters.js currentStateChanged redos2.3 Low
- vllmvLLM phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service6.5 Medium
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers4.3 Medium
- apereo cas, central authentication service +1 moreApereo CAS CasConfigurationMetadataServerController.java redos5.3 Medium
- apereo cas, central authentication service +1 moreApereo CAS ResponseEntity redos5.1 Medium
- gl.inet gl-a1300 slate plus, gl-ar300m shadow, gl-ar300m16 shadow +20 more +22 moreGL.iNet GL-A1300 Slate Plus API redos6.9 Medium
- connections-pro wp-syntaxWP-Syntax <= 1.2 - Author+ Potential ReDoS7.5 High
- jgehrcke wp-geshi-highlight, unknown wp-geshi-highlight — rock-solid syntax highlighting for 259 languages +1 moreWP-GeSHi-Highlight <= 1.4.3 - Author+ ReDoS6.5 Medium
- canonical linux-bluefield, ubuntu package linux-bluefield +1 moreDDoS in Ubuntu package linux-bluefield7.5 High
- zhangyd-c oneblogzhangyd-c OneBlog HTTP Header redos6.9 Medium
@mozilla/readabilitynpm@mozilla/readability Denial of Service through Regex2.9 Low- h2o, h2oai h2oai/h2o-3 +1 moreDenial of Service by ReDOS in h2oai/h2o-37.5 High
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreRegular Expression Denial of Service (ReDoS) in lunary-ai/lunary7.5 High
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreReDoS (Regular Expression Denial of Service) in gaizhenbiao/chuanhuchatgpt6.5 Medium
- gradio-app gradio-app/gradio, gradio project gradio +1 moreRegular Expression Denial of Service (ReDoS) in gradio-app/gradio7.5 High
- binary-husky binary-husky/gpt academic, gpt academic +1 moreRegular Expression Denial of Service (ReDoS) in binary-husky/gpt_academic6.5 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreRegular Expression Denial of Service (ReDoS) in lunary-ai/lunary7.5 High
- h2o, h2oai h2oai/h2o-3 +1 moreDenial of Service by ReDOS in h2oai/h2o-37.5 High
- binary-husky binary-husky/gpt academic, gpt academic +1 moreRegular Expression Denial of Service (ReDoS) in binary-husky/gpt_academic6.5 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Authorization in lunary-ai/lunary7.5 High
- lunary, lunary-ai lunary-ai/lunary +1 moreRegular Expression Denial of Service (ReDoS) in lunary-ai/lunary7.5 High
- danswer-ai danswer-ai/danswerReDoS (Regular Expression Denial of Service) in danswer-ai/danswer7.5 High
uptime-kumanpmDuplicate Advisory: Uptime Kuma ReDoS vulnerability6.0 Medium- babelInefficient RexExp complexity in generated code with .replace when transpiling named capturing groups6.2 Medium
- ruby-lang cgiCGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement4.0 Medium
- ibm entirexIBM EntireX denial of service5.5 Medium
- octokit request.js@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking5.3 Medium
- octokit request-error.js@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking5.3 Medium
- octokit plugin-paginate-rest.js@octokit/plugin-paginate-rest has a Regular Expression in iterator that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking5.3 Medium
- octokit endpoint.js@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking5.3 Medium
- jkroso parse-durationparse-duraton vulnerable to Regex Denial of Service that results in event loop delay and out of memory7.5 High
- koajs koaKoa has Inefficient Regular Expression Complexity9.2 Critical
- Show moreLoading…