CWE-1333: ReDoS
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Also known as Inefficient Regular Expression Complexity, Regular Expression Denial of Service, Catastrophic backtracking.
A kind of CWE-407 Inefficient Algorithmic Complexity.
From the CWE List. © The MITRE Corporation.
Newest
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via inefficient regular expression processing2.2 Low
- markdown-itmarkdown-it is has a Regular Expression Denial of Service (ReDoS)6.9 Medium
- ajv.js ajv, red hat confidential compute attestation, cryostat 4 +67 more +69 moreajv has ReDoS when using `$data` option2.9 Low
- significant-gravitas autogpt, agpt autogpt platform +1 moreRedos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt6.5 Medium
- apollographql apollo server, apollo-server +1 moreApollo Server is vulnerable to denial of service with `startStandaloneServer`7.5 High
- isaacs brace-expansionUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Critical
- lxsmnsyc serovalseroval affected by Denial of Service via RegExp serialization7.5 High
- amauric tarteaucitron.js, amauri tarteaucitronjs +1 moretarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability4.4 Medium
- langchainLangChain <= 0.3.1 MRKLOutputParser ReDoS8.7 High
- py-pdf pypdfpypdf has possible long runtimes for malformed startxref2.7 Low
- flagforgeFlag Forge has ReDoS Vulnerability in User Profile Lookup API7.5 High
- wikimedia foundation mediawiki - visualdata extension, wikisphere visualdata +1 moreVisualData extension: Regular Expression Denial of Service (ReDoS) via crafted user input5.3 Medium
- anthropic mcp typescript sdkMCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS8.7 High
- @fedify fedifyFedify has ReDoS Vulnerability in HTML Parsing Regex7.5 High
- facelessuser pymdown extensions, pymdown-extensions +1 morePyMdown Extensions has ReDOS bug in Figure Capture extension2.7 Low
- open-circle valibotValibot has a ReDoS vulnerability in `EMOJI_REGEX`7.5 High
- zoom workplace, meeting software development kit +1 moreZoom Workplace Clients - Inefficient Regular Expression Complexity8.1 High
- zohocorp manageengine exchange reporter plusDenial of Service (DoS)4.3 Medium
- apache traffic controlApache Traffic Control: ReDoS issue in Traffic Router configuration7.5 High
- sinatraSinatra has ReDoS vulnerability in ETag header value generation2.7 Low
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- ieaturanium238 cattownCattown Vulnerable to Inefficient Regular Expression Complexity and Uncontrolled Resource Consumption8.7 High
- mixmark-io turndownmixmark-io turndown commonmark-rules.js redos6.9 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal ReDoS with Role Name search in KaleoDesignerPortlet6.9 Medium
- yarnpkg yarnyarnpkg Yarn request-manager.js setOptions redos4.8 Medium
- microsoft knackWithdrawn Advisory: Microsoft Knack ReDoS Vulnerability in the Introspection Module6.9 Medium
- microsoft knackWithdrawn Advisory: Microsoft Knack ReDoS Vulnerability in the Introspection Module6.9 Medium
- google angularjsAngularJS 'linky' filter ReDoS4.3 Medium
- ibm concert, concert software +1 moreIBM Concert Software denial of service7.5 High
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- oakserver oakoak: ReDoS in x-forwarded-proto and x-forwarded-for headers5.3 Medium
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- 9001 copypartyCopyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page7.5 High
- yarnpkg yarnyarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos5.3 Medium
- autocaliweb, calibre web web +1 moreCalibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS8.7 High
- rennf93 fastapi-guard, fastapi-guard fastapi guard +1 morefastapi-guard patch contains bypassable RegEx7.8 High
@eslint/plugin-kitnpm@eslint/plugin-kit is vulnerable to Regular Expression Denial of Service attacks through ConfigCommentParser2.3 Low- No product listedchinese-poetry server.js redos5.3 Medium
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- fastapi-guard fastapi guard, rennf93 fastapi-guard +1 moreReDoS in fastapi-guard's penetration attempts detector6.9 Medium
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- vercel hypervercel hyper rimraf-standalone.js ignoreMap redos5.3 Medium
- devrafalko string-mathstring-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS)7.0 High
- growi, inc. growiInefficient regular expression complexity issue exists in GROWI prior to v7.1.6. If exploited, a...5.3 Medium
codemirror-jsDebianCodeMirror Markdown Mode markdown.js redos6.9 Medium- No product listedMarkText index.js getRecommendTitleFromMarkdownString redos6.9 Medium
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- Show moreLoading…