CWE-1333

High likelihood

Inefficient Regular Expression Complexity

Parent: CWE-407 - Inefficient Algorithmic Complexity

The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.

457 vulnerabilities with CWE-1333
CVE-2026-23897 HIGH
Apollo Server 2.0.0-3.13.0, 4.2.0-4.12.9, 5.0.0-5.3.9 - Denial of Service via Exotic Character Set Encoding
CVSS 7.5
CVE-2026-24001 HIGH
jsdiff <8.0.3, 5.2.2, 4.0.4, 3.5.1 - DoS
CVSS 7.5
CVE-2026-23956 HIGH
seroval 0.2.0-1.4.0 - Regular Expression Denial of Service via RegExp Serialization Override
CVSS 7.5
CVE-2026-22809 MEDIUM
Amauri Tarteaucitronjs < 1.29.0 - Denial of Service
CVSS 4.4
CVE-2026-22691 MEDIUM
pypdf < 6.6.0 - Denial of Service via Malformed startxref Processing
CVSS 5.3
CVE-2026-21868 HIGH
FlagForge 2.0-2.3.2 - Regular Expression Denial of Service via User Profile API Username Parameter
CVSS 7.5
CVE-2026-0668 MEDIUM
MediaWiki - VisualData Extension <1.45 - RCE
CVSS 5.3
CVE-2026-0621 HIGH
MCP TypeScript SDK <= 1.25.1 - Denial of Service via RFC 6570 Exploded Array Pattern ReDoS
CVSS 7.5
CVE-2025-71379 MEDIUM
vllm - Regular Expression Denial of Service in Multiple Components
CVSS 4.3
CVE-2025-70030 HIGH
Sunbird-Ed SunbirdEd-portal 1.13.4 - DoS
CVSS 7.5
CVE-2025-70034 HIGH
mscdex ssh2 1.17.0 - Inefficient Regular Expression Complexity
CVSS 7.5
CVE-2025-10990 HIGH
REXML - Regular Expression Denial of Service via Hex Numeric Character Reference Parsing
CVSS 7.5
CVE-2025-69873 LOW
ajv < 8.18.0 - Regular Expression Denial of Service via $data Reference
CVSS 2.9
CVE-2025-68475 HIGH
Fedify < 1.6.13, 1.7.0-1.7.13, 1.8.0-1.8.14, 1.9.0-1.9.1 - Regular Expression Denial of Service in HTML Parser
CVSS 7.5
CVE-2025-68142 MEDIUM
PyMdown Extensions < 10.16.1 - Denial of Service via Figure Caption Extension ReDOS
CVSS 5.3
CVE-2025-66020 HIGH
Valibot 0.31.0-1.1.0 - Denial of Service via EMOJI_REGEX ReDoS
CVSS 7.5
CVE-2025-62484 HIGH
Zoom Workplace Clients <6.5.10 - Privilege Escalation
CVSS 8.1
CVE-2025-5342 MEDIUM
ManageEngine Exchange Reporter Plus <= 5721 - Denial of Service via Search Module ReDOS
CVSS 4.3
CVE-2025-61581 HIGH
Apache Traffic Control - Info Disclosure
CVSS 7.5
CVE-2025-61921 HIGH
Sinatra < 4.2.0 - Denial of Service via If-Match and If-None-Match Header Parsing
CVSS 7.5
CVE-2025-6051 MEDIUM
Hugging Face Transformers <4.52.4 - DoS
CVSS 5.3
CVE-2025-6638 HIGH
Hugging Face Transformers < 4.53.0 - Regular Expression Denial of Service in MarianTokenizer
CVSS 7.5
CVE-2025-58451 HIGH
cattown < 1.0.2 - Denial of Service via Inefficient Regular Expression Complexity
CVE-2025-9670 MEDIUM
mixmark-io turndown <7.2.1 - Info Disclosure
CVSS 5.3
CVE-2025-43764 MEDIUM
Liferay DXP 2024.Q1.1-2024.Q1.20 - ReDoS via Kaleo Designer Role Name Search
CVSS 6.5
Details
Vulnerabilities 457
Exploit Likelihood High