CWE-624: Executable Regular Expression Error
The product uses a regular expression that either (1) contains an executable component with user-controlled inputs, or (2) allows a user to enable execution by inserting pattern modifiers.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
-
libhttp-headers-actionpack-perlDebian HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions 7.5 High - wp media rocket WordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerability 7.5 High
- pear pearweb PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails 9.2 Critical
- danocmx node-tf2-item-format TF2 Item Format Regular Expression Denial of Service vulnerability 7.5 High