CWE-1333
High likelihoodInefficient Regular Expression Complexity
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
426 vulnerabilities with CWE-1333
CVE-2023-30608
MEDIUM
sqlparse >=0.1.15 <0.4.4 - Denial of Service via Inefficient Regular Expression
CVSS 5.5
CVE-2023-27704
MEDIUM
Everything < 1.4.1.1022 - Regular Expression Denial of Service
CVSS 5.5
CVE-2023-26112
LOW
configobj < 5.0.9 - Regular Expression Denial of Service via Validate Function
CVSS 3.7
CVE-2023-28756
MEDIUM
Ruby Time < 0.2.2 - Inefficient Regular Expression Complexity in Time Parser
CVSS 5.3
CVE-2023-28755
MEDIUM
URI < 0.10.0, 0.10.0-0.10.1, 0.11.0, 0.12.0 - Inefficient Regular Expression Complexity
CVSS 5.3
CVE-2023-26118
MEDIUM
angularjs 1.4.9-1.8.3 - Regular Expression Denial of Service via URL Input Validation
CVSS 5.3
CVE-2023-26117
MEDIUM
angularjs 1.0.0-1.8.2 - Regular Expression Denial of Service via $resource Service
CVSS 5.3
CVE-2023-26116
MEDIUM
angularjs 1.2.21-1.8.2 - Regular Expression Denial of Service via angular.copy()
CVSS 5.3
CVE-2023-26103
MEDIUM
deno < 1.31.0 - Regular Expression Denial of Service via WebSocket Header Parsing
CVSS 5.3
CVE-2023-24807
HIGH
Undici < 5.19.1 - Regular Expression Denial of Service via Header Value Normalization
CVSS 7.5
CVE-2023-22799
HIGH
GlobalID < 1.0.1 - Denial of Service via Inefficient Regular Expression Complexity
CVSS 7.5
CVE-2023-22796
HIGH
Activesupport < 6.1.7.1 - Denial of Service
CVSS 7.5
CVE-2023-22795
HIGH
Rails < 6.1.7.1 and < 7.0.4.1 - Denial of Service via If-None-Match Header Regex
CVSS 7.5
CVE-2023-22792
HIGH
Rails 3.0.0-5.2.8.14 and 6.0.0-6.0.6.0 - Denial of Service via Regular Expression Backtracking in Action Dispatch
CVSS 7.5
CVE-2023-25167
MEDIUM
Discourse < 3.0.1 - Regular Expression Denial of Service via Git URL
CVSS 6.5
CVE-2023-25166
MEDIUM
hapi/formula < 3.0.1 - Denial of Service via Inefficient Regular Expression
CVSS 5.5
CVE-2023-23925
HIGH
switcher_client < 3.1.4 - Regular Expression Denial of Service via Strategy Match Operation
CVSS 8.6
CVE-2023-23621
HIGH
Discourse < 3.0.1 - Regular Expression Denial of Service via User Agent
CVSS 8.6
CVE-2023-24038
HIGH
HTML-StripScripts < 1.06 - Inefficient Regular Expression Complexity in _hss_attval_style
CVSS 7.5
CVE-2023-22467
HIGH
Luxon 1.x < 1.38.1, 2.x < 2.5.2, 3.2.1 - Denial of Service via RFC2822 Date Parsing
CVSS 7.5
CVE-2022-25883
MEDIUM
npmjs/semver <5.7.2 and >=7.0.0 <7.5.2 - Regular Expression Denial of Service via Range Function
CVSS 5.3
CVE-2022-44572
HIGH
Rack < 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1 - Denial of Service via Multipart Boundary Parsing
CVSS 7.5
CVE-2022-44571
HIGH
Rack 2.0.0-2.0.9.1 - Denial of Service via Content-Disposition Header Parsing
CVSS 7.5
CVE-2022-44570
HIGH
Rack 1.5.0-2.0.9.1 - Denial of Service via Range Header Parsing
CVSS 7.5
CVE-2022-25881
MEDIUM
http-cache-semantics <4.1.1 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities
426
Exploit Likelihood
High