CWE-1333

457 vulnerabilities with CWE-1333

CVE-2026-52794 HIGH

Sentry: Inefficient Regular Expression Complexity in sentry

CVSS 7.5

CVE-2026-49851 HIGH

Mistune: Potential DoS via quadratic-time parsing in parse_link_text

CVSS 7.5

CVE-2026-54268 HIGH

Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

CVSS 7.5

CVE-2026-49293 HIGH

CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals

CVSS 7.5

CVE-2026-45617 HIGH

LiquidJS: ReDoS via Quadratic Backtracking in `strip_html` Filter Regex

CVSS 7.5

CVE-2026-47138 HIGH

Parse Server: Pre-authentication denial of service via client version header regex backtracking

CVE-2026-44496 HIGH

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

CVSS 7.5

CVE-2026-42567 HIGH

Svelte: ReDoS in `<svelte:element>` Tag Validation

CVSS 7.5

CVE-2026-41848 LOW

Spring Framework Denial of Service via AntPathMatcher

CVSS 3.7

CVE-2026-52778 CRITICAL

YesWiki has Unsafe eval() in Formula Calculator - Remote Code Execution (RCE) & Denial of Service (DoS)

CVSS 9.8

CVE-2026-11478 LOW

kokke tiny-regex-c Pattern re.c matchstar redos

CVSS 3.3

CVE-2026-45409 MEDIUM

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

CVSS 5.3

CVE-2026-8888 HIGH

Securly Chrome Extension < 3.0.7 - Denial of Service

CVSS 7.5

CVE-2026-10692 MEDIUM

johnhuang316 code-index-mcp search_code_advanced is_safe_regex_pattern redos

CVSS 4.3

CVE-2026-10691 MEDIUM

wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos

CVSS 4.3

CVE-2026-10291 MEDIUM

Enderfga claw-orchestrator <= 3.7.0 - Inefficient Regular Expression Complexity in Session Grep Endpoint

CVSS 4.3

CVE-2026-44796 MEDIUM

Nautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS)

CVSS 6.5

CVE-2026-9496 HIGH

Pacote - Inefficient Regular Expression Complexity

CVSS 7.5

CVE-2026-44425 MEDIUM

ShellHub: Crash-DoS via field injection in filter and sort-by parameters

CVSS 5.4

CVE-2026-8159 HIGH

multiparty vulnerable to ReDoS via filename parsing

CVSS 7.5

CVE-2026-33079 HIGH

Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

CVSS 7.5

CVE-2026-41040 HIGH

GROWI - Regular Expression Denial of Service via Crafted Input String

CVSS 7.5

CVE-2026-39320 HIGH

Signal K Server <2.25.0 WebSocket Subscriptions - Regular Expression Denial of Service

CVSS 7.5

CVE-2026-40319 MEDIUM

Giskard RegexMatching Check - Regular Expression Denial of Service

CVSS 5.5

CVE-2026-5986 MEDIUM

Zod jsVideoUrlParser util.js getTime redos

CVSS 5.3