CWE-1333 · Inefficient Regular Expression Complexity (page 6)
Page 6 of 6 — CVEs classified under CWE-1333, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3649 | High | 7.5 | 2021-07-16 | chatwoot is vulnerable to Inefficient Regular Expression Complexity |
CVE-2020-1920 | High | 7.5 | 2021-06-01 | A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unres… |
CVE-2021-33502 | High | 7.5 | 2021-05-24 | The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it… |
CVE-2021-23364 | Medium | 5.3 | 2021-04-28 | The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries. |
CVE-2021-23382 | Medium | 5.3 | 2021-04-26 | The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/previous-ma… |
CVE-2021-23362 | Medium | 5.3 | 2021-03-23 | The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl fun… |
CVE-2021-25292 | Medium | 6.5 | 2021-03-19 | An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic… |
CVE-2021-27291 | High | 7.5 | 2021-03-17 | In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have expo… |
CVE-2021-28092 | High | 7.5 | 2021-03-12 | The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker… |
CVE-2021-23354 | Medium | 5.3 | 2021-03-12 | The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string /\%(?:\(([\w_.]+)\)|([1-9]\d*)\$)?([0 +\-\]… |
CVE-2021-26813 | High | 7.5 | 2021-03-03 | markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can m… |
CVE-2021-21317 | Medium | 5.3 | 2021-02-16 | uap-core in an open-source npm package which contains the core of BrowserScope's original user agent string parser. In uap-core before version 0.11.0, some reg… |
CVE-2020-5243 | Medium | 5.7 | 2020-02-21 | uap-core before 0.7.3 is vulnerable to a denial of service attack when processing crafted User-Agent strings. Some regexes are vulnerable to regular expression… |
CVE-2019-16215 | Medium | 6.5 | 2019-09-18 | The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A user who is logged into the server could s… |
CVE-2019-12041 | High | 7.5 | 2019-05-13 | lib/common/html_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section. |
CVE-2017-16021 | Medium | 6.5 | 2018-06-04 | uri-js is a module that tries to fully implement RFC 3986. One of these features is validating whether or not a supplied URL is valid or not. To do this, uri-j… |
CVE-2015-8854 | High | 7.5 | 2017-01-23 | The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that trigger a "catastrophi… |
CVE-2015-8315 | High | 7.5 | 2017-01-23 | The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression de… |