CWE-1333

457 vulnerabilities with CWE-1333

CVE-2026-35041 MEDIUM

ReDoS in fast-jwt when using RegExp in allowed* leading to CPU exhaustion during token verification

CVSS 4.2

CVE-2026-35611 HIGH

Addressable 2.3.0-2.8.x URI Templates - Regular Expression Denial of Service

CVSS 7.5

CVE-2026-35458 CRITICAL

Gotenberg <=8.29.1 extraHttpHeaders Scope - Regular Expression Denial of Service

CVSS 9.8

CVE-2026-35213 HIGH

Regular Expression Denial of Service (ReDoS) in @hapi/content HTTP header parsing

CVSS 7.5

CVE-2026-34939 MEDIUM

PraisonAI: ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()

CVSS 6.5

CVE-2026-33671 HIGH

Picomatch Extglob Quantifiers - Regular Expression Denial of Service

CVSS 7.5

CVE-2026-0967 MEDIUM

Libssh: libssh: denial of service via inefficient regular expression processing

CVSS 5.5

CVE-2026-4926 HIGH

path-to-regexp vulnerable to Denial of Service via sequential optional groups

CVSS 7.5

CVE-2026-4923 MEDIUM

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards

CVSS 5.9

CVE-2026-4867 HIGH

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters

CVSS 7.5

CVE-2026-33169 MEDIUM

Active Support <8.1.2.1/8.0.4.1/7.2.3.1 - DoS

CVSS 5.3

CVE-2026-4539 LOW

pygments archetype.py AdlLexer redos

CVSS 3.3

CVE-2026-22178 MEDIUM

OpenClaw < 2026.2.19 - ReDoS and Regex Injection via Unescaped Feishu Mention Metadata

CVSS 6.5

CVE-2026-28356 HIGH

multipart <1.2.2/1.3.1/1.4.0-dev - DoS

CVSS 7.5

CVE-2026-30837 HIGH

Elysia < 1.4.26 - Inefficient Regular Expression Complexity in URL Format Validation

CVSS 7.5

CVE-2026-30925 HIGH

Parse Server <9.5.0-alpha.14/8.6.11 - DoS

CVSS 7.5

CVE-2026-29076 MEDIUM

cpp-httplib < 0.37.0 - Denial of Service via RFC 5987 Filename Regex Backtracking

CVSS 5.9

CVE-2026-3293 LOW

snowflakedb snowflake-jdbc <=4.0.1 - DoS

CVSS 3.3

CVE-2026-26936 MEDIUM

Kibana AI Inference Anonymization - DoS

CVSS 4.9

CVE-2026-27904 HIGH

minimatch < 10.2.3, < 3.1.4 - Inefficient Regular Expression Complexity via Nested Extglob Patterns

CVSS 7.5

CVE-2026-1388 HIGH

GitLab 9.2-18.7.4, 18.8-18.8.4, 18.9.0 - ReDoS via Merge Request Endpoint

CVSS 7.5

CVE-2026-26996 HIGH

minimatch < 10.2.1 - Regular Expression Denial of Service via Glob Pattern with Consecutive Wildcards

CVSS 7.5

CVE-2026-2327 MEDIUM

markdown-it 13.0.0-14.1.0 - Regular Expression Denial of Service via Linkify Function

CVSS 5.3

CVE-2026-26006 MEDIUM

AutoGPT 0.4.0-0.6.31 - Regular Expression Denial of Service in Code Extraction Block

CVSS 6.5

CVE-2026-25547 CRITICAL

@isaacs/brace-expansion < 5.0.1 - Denial of Service via Unbounded Brace Range Expansion