CWE-1333: ReDoS
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Also known as Inefficient Regular Expression Complexity, Regular Expression Denial of Service, Catastrophic backtracking.
A kind of CWE-407 Inefficient Algorithmic Complexity.
From the CWE List. © The MITRE Corporation.
Newest
- nltkNLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input8.7 High
- n8nn8n before 1.123.69 ReDoS via Filter and Switch Node5.3 Medium
- logto-io logtoLogto: ReDoS via unescaped user input in email subaddressing regex (blockSubaddressing)7.5 High
- wazuh, wazuh wazuh-manager +1 moreWazuh 4.0.0 < 4.14.7 API DoS via Deeply Nested JSON auth_context7.1 High
- andialbrecht sqlparsesqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger8.7 High
- andialbrecht sqlparsesqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)7.5 High
- vllmvLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of CVE-2026-555745.3 Medium
- No product listedcrmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time...7.5 High
- gchq cyberchefCyberChef’s pretty-recipe parser vulnerable to client-side ReDoS / CPU exhaustion when parsing a malformed #recipe= URL4.3 Medium
- sveltejs kitSvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via the Accept header5.3 Medium
- thephpleague commonmarkLeague CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml Bypass5.3 Medium
- facelessuser pymdown-extensionspymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors7.5 High
- rrrene htmlsanitizeex, html sanitize ex +1 moreQuadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service8.2 High
- openstack swiftIn OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular...8.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing6.5 Medium
- honojs honoHono: ReDoS in CORS middleware via Access-Control-Request-Headers5.3 Medium
- thumborThumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing hostname bypass via wildcard dot8.2 High
nltkDebianNatural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex7.5 High- apache supersetApache Superset: Regular Expression Denial of Service (ReDoS) in SQL Parser5.3 Medium
libdate-manip-perlDebian,perl-Date-ManipAlmaLinux +1 moreDate::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in _parse_time7.5 High- open mercato mercatoReDoS in Open Mercato6.9 Medium
- gitea open source git serverParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests7.5 High
- getgrav gravGrav: Authenticated ReDoS via regex_replace in Twig Sandbox6.0 Medium
- getgrav gravGrav < 2.0.4 ReDoS via regex_replace in Sandbox6.0 Medium
- mattermost, mattermost server +1 moreCrafted message attachment causes client-side denial of service via markdown parser regex backtracking in Mattermost6.5 Medium
- phalcon cphalconPhalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS8.7 High
- oalders http::dateHTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date7.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config6.5 Medium
- hapifhir org.hl7.fhir.coreHAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint7.5 High
- facelessuser soup sieve, soupsieve +1 moreSoup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector Parser7.5 High
- redhat openshift ai, red hat openshift ai 2.25, openshift ai 3.3 +1 more +3 moreGuardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex6.5 Medium
- lepture mistuneMistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions7.5 High
- lepture mistuneinline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs7.5 High
- lepture mistuneMistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)7.5 High
- bakerscot string::utilString::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service7.5 High
- scrapy protegoProtego: Exponential backtracking ReDoS in robots.txt URL wildcard matching7.1 High
- vllmvLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends8.7 High
@asymmetric-effort/nogginlessdomnpm@asymmetric-effort/nogginlessdom vulnerable to ReDoS via user-controlled regex in HTMLInputElement pattern validation6.9 Medium- jsonataJSONata: Malicious inputs to "$toMillis" function can cause resource exhaustion7.5 High
- lobehubLobeChat < 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill Import7.1 High
- markdown-it linkify-itlinkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop8.7 High
- getsentry sentrySentry: Inefficient Regular Expression Complexity in sentry7.5 High
- lepture mistune, red hat migration toolkit for applications 8, openshift ai (rhoai) +3 more +5 moreMistune: Potential DoS via quadratic-time parsing in parse_link_text8.7 High
- sunnyadn js-tomlCPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals7.5 High
- riganti dotvvmDotVVM: ReDOS in routing8.2 High
- hapifhir hl7 fhir core, org.hl7.fhir.core +1 moreHAPI FHIR: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS7.5 High
bleachPyPIBleach linkify(parse_email=True) CPU exhaustion via unbounded email regex scanning4.3 Medium- faisalman ua-parser-jsUAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`5.3 Medium
- angularAngular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)8.2 High
- Show moreLoading…