CWE-1333
High likelihoodInefficient Regular Expression Complexity
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
457 vulnerabilities with CWE-1333
CVE-2022-41323
HIGH
Django 3.2-4.1 - Denial of Service via Locale Parameter Regular Expression
CVSS 7.5
CVE-2022-37603
HIGH
webpack.js loader-utils < 1.4.2 - Regular Expression Denial of Service in interpolateName Function
CVSS 7.5
CVE-2022-37599
HIGH
webpack.js loader-utils 1.0.0-1.4.1 - Regular Expression Denial of Service in interpolateName Function
CVSS 7.5
CVE-2022-34402
MEDIUM
Dell Wyse ThinOS < 9.3.2102 - Authenticated Denial of Service via Regular Expression Complexity
CVSS 6.8
CVE-2022-39280
MEDIUM
Pyup Dependency Parser < 0.5.1 - Denial of Service
CVSS 5.9
CVE-2022-34428
MEDIUM
Dell Hybrid Client - Regular Expression Denial of Service in UI
CVSS 5.0
CVE-2022-24373
MEDIUM
react-native-reanimated <3.0.0-rc.1 - ReDoS
CVSS 5.3
CVE-2022-21222
MEDIUM
css-what < 2.1.3 - Regular Expression Denial of Service via Insecure Regular Expression in parse Function
CVSS 5.3
CVE-2022-37259
HIGH
stealjs steal 2.2.4 - Regular Expression Denial of Service via String Variable in babel.js
CVSS 7.5
CVE-2022-37260
HIGH
stealjs steal 2.2.4 - Regular Expression Denial of Service via Input Variable
CVSS 7.5
CVE-2022-37262
HIGH
stealjs steal 2.2.4 - Regular Expression Denial of Service via source and sourceWithComments Variable
CVSS 7.5
CVE-2022-40023
HIGH
Mako < 1.2.2 - Regular Expression Denial of Service via Lexer Class
CVSS 7.5
CVE-2022-36064
MEDIUM
Shescape - Inefficient Regular Expression Complexity
CVSS 5.9
CVE-2022-29158
HIGH
Apache OFBiz < 18.12.06 - Unauthenticated Regular Expression Denial of Service
CVSS 7.5
CVE-2022-25887
MEDIUM
sanitize-html < 2.7.1 - Regular Expression Denial of Service via HTML Comment Removal
CVSS 5.3
CVE-2022-36034
HIGH
nitrado.js < 0.2.5 - Inefficient Regular Expression Complexity via Malicious Input
CVSS 7.5
CVE-2022-1930
MEDIUM
eth-account < 0.5.9 - Denial of Service via encode_structured_data Method
CVSS 5.9
CVE-2022-35923
HIGH
v8n <1.5.1 - Denial of Service
CVSS 7.5
CVE-2022-2596
MEDIUM
GitHub node-fetch <3.2.10 - Info Disclosure
CVSS 5.9
CVE-2022-34749
HIGH
mistune < 2.0.2 - Inefficient Regular Expression Complexity
CVSS 7.5
CVE-2022-25858
MEDIUM
terser < 4.8.1 and 5.0.0-5.14.2 - Regular Expression Denial of Service
CVSS 5.3
CVE-2022-31147
HIGH
jQuery Validation Plugin <1.19.5 - DoS
CVSS 7.5
CVE-2022-31781
HIGH
Apache Tapestry < 5.8.2 - Regular Expression Denial of Service in ContentType Class
CVSS 7.5
CVE-2022-31129
HIGH
moment 2.18.0-2.29.3 - Denial of Service via RFC2822 Date Parsing
CVSS 7.5
CVE-2022-25758
MEDIUM
scss-tokenizer < 0.4.3 - Denial of Service via Insecure Regular Expression in loadAnnotation
CVSS 5.3
Details
Vulnerabilities
457
Exploit Likelihood
High