CWE-1333
High likelihoodInefficient Regular Expression Complexity
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
457 vulnerabilities with CWE-1333
CVE-2022-1954
MEDIUM
GitLab 1.0.2-14.10.4, 15.0-15.0.3, 15.1 - Regular Expression Denial of Service via Web Server Response Headers
CVSS 4.3
CVE-2022-31110
MEDIUM
RSSHub < 2022-06-21 - Denial of Service via Inefficient Regular Expression in Filter Parameters
CVSS 5.3
CVE-2022-1929
MEDIUM
devcert < 1.2.1 - Denial of Service via Inefficient Regular Expression in certificateFor Method
CVSS 5.9
CVE-2022-29169
HIGH
BigBlueButton <2.3.19, <2.4.7, <2.5.0-beta.2 - DoS
CVSS 7.5
CVE-2022-21195
MEDIUM
url-regex - Regular Expression Denial of Service
CVSS 5.3
CVE-2022-26650
HIGH
Apache ShenYu 2.4.0-2.4.2 - Denial of Service via RegexPredicateJudge
CVSS 7.5
CVE-2022-1510
MEDIUM
GitLab <14.8.6-14.9.4-14.10.1 - DoS
CVSS 6.5
CVE-2022-29167
HIGH
Hawk < 9.0.1 - Denial of Service via Host Header Regular Expression
CVSS 7.4
CVE-2022-25844
MEDIUM
angularjs >=1.7.0 - Regular Expression Denial of Service via Custom Locale Rule
CVSS 5.3
CVE-2022-24836
HIGH
Nokogiri < 1.13.4 - Inefficient Regular Expression Complexity in HTML Encoding Detection
CVSS 7.5
CVE-2022-25598
HIGH
Apache DolphinScheduler < 2.0.5 - Regular Expression Denial of Service in User Registration
CVSS 7.5
CVE-2022-24729
MEDIUM
CKEditor 4.0-4.17.2 - Denial of Service via Dialog Input Validator Regex
CVSS 6.5
CVE-2022-24713
HIGH
regex <= 1.5.4 - Denial of Service via Regex Parsing Mitigation Bypass
CVSS 7.5
CVE-2022-21681
HIGH
marked < 4.0.10 - Denial of Service via Catastrophic Backtracking in ReflinkSearch Regex
CVSS 7.5
CVE-2022-21680
HIGH
marked < 4.0.10 - Regular Expression Denial of Service via Catastrophic Backtracking
CVSS 7.5
CVE-2022-21670
MEDIUM
markdown-it <1.3.2 - Info Disclosure
CVSS 5.3
CVE-2021-4437
LOW
dbartholomae lambda-middleware frameguard <1.1.0 - Info Disclosure
CVSS 3.5
CVE-2021-32848
HIGH
octobox < 2021-11-02 - Denial of Service via ReDoS in Search Query Parser
CVSS 7.5
CVE-2021-32837
HIGH
mechanize < 0.4.6 - Regular Expression Denial of Service
CVSS 7.5
CVE-2021-4306
LOW
cronvel terminal-kit <2.1.8 - Info Disclosure
CVSS 3.5
CVE-2021-4305
LOW
Woorank robots-txt-guard - Info Disclosure
CVSS 3.5
CVE-2021-32821
MEDIUM
MooTools < 1.6.0 - Regular Expression Denial of Service via CSS Selector Parser
CVSS 6.2
CVE-2021-4299
MEDIUM
cronvel string-kit <0.12.8 - Info Disclosure
CVSS 4.3
CVE-2021-35065
HIGH
glob-parent 6.0.0 - Regular Expression Denial of Service via Enclosure Regex
CVSS 7.5
CVE-2021-43309
MEDIUM
uri-template-lite < 22.9.0 - Regular Expression Denial of Service via URI.expand Method
CVSS 5.9
Details
Vulnerabilities
457
Exploit Likelihood
High