CWE-1333
High likelihoodInefficient Regular Expression Complexity
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
457 vulnerabilities with CWE-1333
CVE-2024-26146
MEDIUM
Rack 0.4-2.0.9.3, 3.0.0-3.0.9.0 - Denial of Service via Header Parsing
CVSS 5.3
CVE-2024-25126
MEDIUM
Rack 0.4-2.2.8.1 and 3.0.0-3.0.9.1 - Denial of Service via Content-Type Header Parsing
CVSS 5.3
CVE-2024-1892
MEDIUM
scrapy < 2.11.1 - Denial of Service via XMLFeedSpider XML Parsing
CVSS 6.5
CVE-2024-26142
HIGH
Rails 7.1.0-7.1.3 - Denial of Service via Accept Header Parsing ReDoS
CVSS 7.5
CVE-2024-27088
NONE
es5-ext 0.10.0-0.10.62 - Inefficient Regular Expression Complexity in function#copy and function#toStringTokens
CVE-2024-21490
HIGH
angular.js >=1.3.0 - Denial of Service via ng-srcset Directive Regex Backtracking
CVSS 7.5
CVE-2024-24762
HIGH
python-multipart < 0.0.7 - Regular Expression Denial of Service via Content-Type Header Parsing
CVSS 7.5
CVE-2024-23732
HIGH
embedchain < 0.1.57 - Denial of Service via JSON Loader ReDoS
CVSS 7.5
CVE-2023-0881
HIGH
Canonical Linux-Bluefield < 5.4.0-1058.64 - Denial of Service via TCP Port 22 DDoS
CVSS 7.5
CVE-2023-7279
LOW
Secure Systems Engineering Connaisseur <3.3.0 - Info Disclosure
CVSS 2.6
CVE-2023-6502
MEDIUM
GitLab CE/EE <16.10.6, <16.11.3, <17.0.1 - DoS
CVSS 4.3
CVE-2023-6688
MEDIUM
GitLab 16.11.0-16.11.1 - Denial of Service via Google Chat Messages Integration
CVSS 6.5
CVE-2023-6682
MEDIUM
GitLab 16.9-16.9.6, 16.10-16.10.4, 16.11-16.11.1 - Denial of Service via Discord Integration Chat Message Processing
CVSS 6.5
CVE-2023-6678
MEDIUM
GitLab < 16.8.6, 16.9 < 16.9.4, 16.10 < 16.10.2 - Denial of Service via JUnit Test Report File
CVSS 4.3
CVE-2023-6489
MEDIUM
GitLab CE/EE <16.8.6, <16.9.4, <16.10.2 - DoS
CVSS 4.3
CVE-2023-51931
HIGH
alanclarke URLite < 3.1.0 - Denial of Service via Parsing Function
CVSS 7.5
CVE-2023-6736
MEDIUM
GitLab 11.3-16.7.5, 16.8-16.8.2, 16.9-16.9.0 - Denial of Service via Malicious CODEOWNERS File
CVSS 6.5
CVE-2023-6159
MEDIUM
GitLab 12.7-16.6.5, 16.7-16.7.3, 16.8 - Regular Expression Denial of Service via Malicious Cargo.toml Input
CVSS 6.5
CVE-2023-29487
CRITICAL
Heimdal Thor < 3.5.3 - Denial of Service via Threat To Process Correlation Module
CVSS 9.1
CVE-2023-29486
CRITICAL
Heimdal Thor <3.7.0 - Privilege Escalation
CVSS 9.8
CVE-2023-50249
HIGH
Sentry Astro 7.78.0-7.86.0 - Regular Expression Denial of Service
CVSS 7.5
CVE-2023-48631
MEDIUM
Adobe CSS-Tools < 4.3.2 - Denial of Service via CSS Parsing
CVSS 5.3
CVE-2023-46402
HIGH
git-urls 1.0.0 - Denial of Service via Inefficient Regular Expression
CVSS 7.5
CVE-2023-45806
MEDIUM
Discourse <3.1.3, <3.2.0.beta3 - Info Disclosure
CVSS 4.3
CVE-2023-3909
MEDIUM
GitLab 12.3-16.3.5, 16.4-16.4.1, 16.5 - Regular Expression Denial of Service via gitlab-ci.yml Timeout Input
CVSS 4.3
Details
Vulnerabilities
457
Exploit Likelihood
High