CWE-1333 · Inefficient Regular Expression Complexity (page 5)
Page 5 of 6 — CVEs classified under CWE-1333, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-4299 | Medium | 4.3 | 2023-01-02 | A vulnerability classified as problematic was found in cronvel string-kit up to 0.12.7. This vulnerability affects the function naturalSort of the file lib/nat… |
CVE-2018-25061 | Medium | 4.3 | 2022-12-31 | A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to ineff… |
CVE-2018-25049 | Low | 3.0 | 2022-12-27 | A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The… |
CVE-2015-10005 | Low | 3.5 | 2022-12-27 | A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/html_re.js. T… |
CVE-2021-35065 | High | 7.5 | 2022-12-26 | The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression. |
CVE-2022-40897 | Medium | 5.9 | 2022-12-23 | Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom Package… |
CVE-2020-26302 | High | 7.5 | 2022-12-22 | is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of… |
CVE-2022-23517 | High | 7.5 | 2022-12-14 | rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an ineffici… |
CVE-2022-23514 | High | 7.5 | 2022-12-14 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah < 2.19.1 contains an inefficie… |
CVE-2022-30122 | High | 7.5 | 2022-12-05 | A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack. |
CVE-2022-42124 | High | 7.5 | 2022-11-15 | ReDoS vulnerability in LayoutPageTemplateEntryUpgradeProcess in Liferay Portal 7.3.2 through 7.4.3.4 and Liferay DXP 7.2 fix pack 9 through fix pack 18, 7.3 be… |
CVE-2022-42966 | Medium | 5.9 | 2022-11-09 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to th… |
CVE-2022-42965 | Low | 3.7 | 2022-11-09 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply… |
CVE-2022-42964 | Medium | 5.9 | 2022-11-09 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input t… |
CVE-2022-37620 | High | 7.5 | 2022-10-31 | A Regular Expression Denial of Service (ReDoS) flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression. |
CVE-2022-25918 | Medium | 5.3 | 2022-10-27 | The package shescape from 1.5.10 and before 1.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the escape function in index.js, due to th… |
CVE-2022-3517 | High | 7.5 | 2022-10-17 | A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with… |
CVE-2022-2908 | Medium | 4.3 | 2022-10-17 | A potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions starting from 15.2 before 15.2.3, all vers… |
CVE-2022-42969 | Medium | 5.3 | 2022-10-16 | The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository w… |
CVE-2022-41323 | High | 7.5 | 2022-10-16 | In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale… |
CVE-2022-37603 | High | 7.5 | 2022-10-14 | A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url varia… |
CVE-2022-37599 | High | 7.5 | 2022-10-11 | A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourceP… |
CVE-2022-34402 | Medium | 6.8 | 2022-10-10 | Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerabi… |
CVE-2022-39280 | Medium | 5.9 | 2022-10-06 | dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial… |
CVE-2022-34428 | Medium | 5.0 | 2022-09-30 | Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. An adversary with WMS group admin access could… |
CVE-2022-24373 | Medium | 5.3 | 2022-09-30 | The package react-native-reanimated before 3.0.0-rc.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper usage of regular expressio… |
CVE-2022-21222 | Medium | 5.3 | 2022-09-30 | The package css-what before 2.1.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of insecure regular expression in the re_attr… |
CVE-2022-37259 | High | 7.5 | 2022-09-20 | A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js. |
CVE-2022-37260 | High | 7.5 | 2022-09-15 | A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the input variable in main.js. |
CVE-2022-37262 | High | 7.5 | 2022-09-15 | A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.js. |
CVE-2022-40023 | High | 7.5 | 2022-09-07 | Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and lingu… |
CVE-2022-36064 | Medium | 5.9 | 2022-09-06 | Shescape is a shell escape package for JavaScript. An Inefficient Regular Expression Complexity vulnerability impacts users that use Shescape to escape argumen… |
CVE-2022-29158 | High | 7.5 | 2022-09-02 | Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles URLs provided by external, unauthentica… |
CVE-2022-25887 | Medium | 5.3 | 2022-08-30 | The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement log… |
CVE-2022-36034 | High | 7.5 | 2022-08-29 | nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been patched in… |
CVE-2021-43309 | Medium | 5.9 | 2022-08-24 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary… |
CVE-2022-1930 | Medium | 5.9 | 2022-08-22 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary inpu… |
CVE-2022-35923 | High | 7.5 | 2022-08-02 | v8n is a javascript validation library. Versions of v8n prior to 1.5.1 were found to have an inefficient regular expression complexity in the `lowercase()` and… |
CVE-2022-2596 | Medium | 5.9 | 2022-08-01 | Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10. |
CVE-2022-34749 | High | 7.5 | 2022-07-25 | In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge c… |
CVE-2022-25858 | Medium | 5.3 | 2022-07-15 | The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular e… |
CVE-2022-31147 | High | 7.5 | 2022-07-14 | The jQuery Validation Plugin (jquery-validation) provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular… |
CVE-2022-31781 | High | 7.5 | 2022-07-13 | Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles Content Types. Specially crafted Conten… |
CVE-2022-31129 | High | 7.5 | 2022-07-06 | moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient p… |
CVE-2022-25758 | Medium | 5.3 | 2022-07-01 | All versions of package scss-tokenizer are vulnerable to Regular Expression Denial of Service (ReDoS) via the loadAnnotation() function, due to the usage of in… |
CVE-2022-1954 | Medium | 4.3 | 2022-07-01 | A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from 1.0.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior t… |
CVE-2022-31110 | Medium | 5.3 | 2022-06-29 | RSSHub is an open source, extensible RSS feed generator. In commits prior to 5c4177441417 passing some special values to the `filter` and `filterout` parameter… |
CVE-2021-40901 | High | 7.5 | 2022-06-27 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails. |
CVE-2021-40900 | High | 7.5 | 2022-06-27 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails. |
CVE-2021-40899 | High | 7.5 | 2022-06-27 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in repo-git-downloader v0.1.1 when downloading crafted invalid git repositories. |
CVE-2021-40898 | High | 7.5 | 2022-06-27 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files. |
CVE-2021-40897 | High | 7.5 | 2022-06-27 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls. |
CVE-2021-40896 | High | 7.5 | 2022-06-27 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails. |
CVE-2021-40895 | High | 7.5 | 2022-06-27 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements. |
CVE-2021-40894 | High | 7.5 | 2022-06-24 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in underscore-99xp v1.7.2 when the deepValueSearch function is called. |
CVE-2021-40893 | High | 7.5 | 2022-06-24 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in validate-data v0.1.1 when validating crafted invalid emails. |
CVE-2021-40892 | High | 7.5 | 2022-06-24 | A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgb(a) strings. |
CVE-2021-46823 | Medium | 6.5 | 2022-06-18 | python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial… |
CVE-2021-40660 | High | 7.5 | 2022-06-14 | An issue was discovered in Delight Nashorn Sandbox 0.2.0. There is an ReDoS vulnerability that can be exploited to launching a denial of service (DoS) attack. |
CVE-2022-1929 | Medium | 5.9 | 2022-06-02 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to… |
CVE-2021-43308 | Medium | 5.9 | 2022-06-02 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arb… |
CVE-2021-43307 | Medium | 5.9 | 2022-06-02 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary inpu… |
CVE-2021-43306 | Medium | 5.9 | 2022-06-02 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary… |
CVE-2022-29169 | High | 7.5 | 2022-06-01 | BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expr… |
CVE-2022-21195 | Medium | 5.3 | 2022-05-20 | All versions of package url-regex are vulnerable to Regular Expression Denial of Service (ReDoS) which can cause the CPU usage to crash. |
CVE-2022-26650 | High | 7.5 | 2022-05-17 | In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matches(conditionData.getParamValue(), realData) to make judgments, where both param… |
CVE-2022-1510 | Medium | 6.5 | 2022-05-11 | An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions sta… |
CVE-2022-29167 | High | 7.4 | 2022-05-05 | Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and re… |
CVE-2022-25844 | Medium | 5.3 | 2022-05-01 | The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to assi… |
CVE-2022-24836 | High | 7.5 | 2022-04-11 | Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive back… |
CVE-2022-25598 | High | 7.5 | 2022-03-30 | Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache DolphinScheduler users should upgrade to v… |
CVE-2022-24729 | Medium | 6.5 | 2022-03-16 | CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vu… |
CVE-2022-24713 | High | 7.5 | 2022-03-08 | regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks cau… |
CVE-2022-21681 | High | 7.5 | 2022-01-14 | Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cause catastrophic backtracking against so… |
CVE-2022-21680 | High | 7.5 | 2022-01-14 | Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `block.def` may cause catastrophic backtracking against some strings… |
CVE-2022-21670 | Medium | 5.3 | 2022-01-10 | markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser signific… |
CVE-2021-3842 | High | 7.5 | 2022-01-04 | nltk is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-41817 | High | 7.5 | 2022-01-01 | Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3… |
CVE-2021-23490 | High | 7.5 | 2021-12-24 | The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the checkHeader function. |
CVE-2021-45470 | High | 7.5 | 2021-12-23 | lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS (regular expression denial of service) or other im… |
CVE-2021-43843 | Medium | 5.3 | 2021-12-20 | jsx-slack is a package for building JSON objects for Slack block kit surfaces from JSX. The maintainers found the patch for CVE-2021-43838 in jsx-slack v4.5.1… |
CVE-2021-43838 | Medium | 5.3 | 2021-12-17 | jsx-slack is a library for building JSON objects for Slack Block Kit surfaces from JSX. In versions prior to 4.5.1 users are vulnerable to a regular expression… |
CVE-2021-39940 | Medium | 4.3 | 2021-12-13 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versio… |
CVE-2021-39933 | Medium | 4.3 | 2021-12-13 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versi… |
CVE-2021-43805 | High | 7.5 | 2021-12-07 | Solidus is a free, open-source ecommerce platform built on Rails. Versions of Solidus prior to 3.1.4, 3.0.4, and 2.11.13 have a denial of service vulnerability… |
CVE-2021-3765 | High | 7.5 | 2021-11-02 | validator.js is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-41115 | Medium | 4.3 | 2021-10-07 | Zulip is an open source team chat server. In affected versions Zulip allows organization administrators on a server to configure "linkifiers" that automaticall… |
CVE-2021-23446 | High | 7.5 | 2021-09-29 | The package handsontable before 10.0.0; the package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) in Han… |
CVE-2021-3828 | High | 7.5 | 2021-09-27 | nltk is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3822 | High | 7.5 | 2021-09-27 | jsoneditor is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3820 | High | 7.5 | 2021-09-27 | inflect is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3810 | High | 7.5 | 2021-09-17 | code-server is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3807 | High | 7.5 | 2021-09-17 | ansi-regex is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3804 | High | 7.5 | 2021-09-17 | taro is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3803 | High | 7.5 | 2021-09-17 | nth-check is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3795 | High | 7.5 | 2021-09-15 | semver-regex is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3801 | Medium | 6.5 | 2021-09-15 | prism is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3794 | High | 7.5 | 2021-09-15 | vuelidate is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3777 | High | 7.5 | 2021-09-15 | nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity |
CVE-2021-3749 | High | 7.5 | 2021-08-31 | axios is vulnerable to Inefficient Regular Expression Complexity |