CWE-1333

High likelihood

Inefficient Regular Expression Complexity

Parent: CWE-407 - Inefficient Algorithmic Complexity

The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.

457 vulnerabilities with CWE-1333
CVE-2022-41323 HIGH
Django 3.2-4.1 - Denial of Service via Locale Parameter Regular Expression
CVSS 7.5
CVE-2022-37603 HIGH
webpack.js loader-utils < 1.4.2 - Regular Expression Denial of Service in interpolateName Function
CVSS 7.5
CVE-2022-37599 HIGH
webpack.js loader-utils 1.0.0-1.4.1 - Regular Expression Denial of Service in interpolateName Function
CVSS 7.5
CVE-2022-34402 MEDIUM
Dell Wyse ThinOS < 9.3.2102 - Authenticated Denial of Service via Regular Expression Complexity
CVSS 6.8
CVE-2022-39280 MEDIUM
Pyup Dependency Parser < 0.5.1 - Denial of Service
CVSS 5.9
CVE-2022-34428 MEDIUM
Dell Hybrid Client - Regular Expression Denial of Service in UI
CVSS 5.0
CVE-2022-24373 MEDIUM
react-native-reanimated <3.0.0-rc.1 - ReDoS
CVSS 5.3
CVE-2022-21222 MEDIUM
css-what < 2.1.3 - Regular Expression Denial of Service via Insecure Regular Expression in parse Function
CVSS 5.3
CVE-2022-37259 HIGH
stealjs steal 2.2.4 - Regular Expression Denial of Service via String Variable in babel.js
CVSS 7.5
CVE-2022-37260 HIGH
stealjs steal 2.2.4 - Regular Expression Denial of Service via Input Variable
CVSS 7.5
CVE-2022-37262 HIGH
stealjs steal 2.2.4 - Regular Expression Denial of Service via source and sourceWithComments Variable
CVSS 7.5
CVE-2022-40023 HIGH
Mako < 1.2.2 - Regular Expression Denial of Service via Lexer Class
CVSS 7.5
CVE-2022-36064 MEDIUM
Shescape - Inefficient Regular Expression Complexity
CVSS 5.9
CVE-2022-29158 HIGH
Apache OFBiz < 18.12.06 - Unauthenticated Regular Expression Denial of Service
CVSS 7.5
CVE-2022-25887 MEDIUM
sanitize-html < 2.7.1 - Regular Expression Denial of Service via HTML Comment Removal
CVSS 5.3
CVE-2022-36034 HIGH
nitrado.js < 0.2.5 - Inefficient Regular Expression Complexity via Malicious Input
CVSS 7.5
CVE-2022-1930 MEDIUM
eth-account < 0.5.9 - Denial of Service via encode_structured_data Method
CVSS 5.9
CVE-2022-35923 HIGH
v8n <1.5.1 - Denial of Service
CVSS 7.5
CVE-2022-2596 MEDIUM
GitHub node-fetch <3.2.10 - Info Disclosure
CVSS 5.9
CVE-2022-34749 HIGH
mistune < 2.0.2 - Inefficient Regular Expression Complexity
CVSS 7.5
CVE-2022-25858 MEDIUM
terser < 4.8.1 and 5.0.0-5.14.2 - Regular Expression Denial of Service
CVSS 5.3
CVE-2022-31147 HIGH
jQuery Validation Plugin <1.19.5 - DoS
CVSS 7.5
CVE-2022-31781 HIGH
Apache Tapestry < 5.8.2 - Regular Expression Denial of Service in ContentType Class
CVSS 7.5
CVE-2022-31129 HIGH
moment 2.18.0-2.29.3 - Denial of Service via RFC2822 Date Parsing
CVSS 7.5
CVE-2022-25758 MEDIUM
scss-tokenizer < 0.4.3 - Denial of Service via Insecure Regular Expression in loadAnnotation
CVSS 5.3
Details
Vulnerabilities 457
Exploit Likelihood High