Search Vulnerabilities

Sentry: Inefficient Regular Expression Complexity in sentry

Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

vllm - Regular Expression Denial of Service in Multiple Components

CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals

LiquidJS: ReDoS via Quadratic Backtracking in `strip_html` Filter Regex

Parse Server: Pre-authentication denial of service via client version header regex backtracking

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

Svelte: ReDoS in `<svelte:element>` Tag Validation

Spring Framework Denial of Service via AntPathMatcher

YesWiki has Unsafe eval() in Formula Calculator - Remote Code Execution (RCE) & Denial of Service (DoS)

kokke tiny-regex-c Pattern re.c matchstar redos

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

johnhuang316 code-index-mcp search_code_advanced is_safe_regex_pattern redos

wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos

Enderfga claw-orchestrator Session Grep Endpoint embedded-server.ts validateRegex redos

Nautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS)

Versions of the package pacote from 11

ShellHub: Crash-DoS via field injection in filter and sort-by parameters

multiparty vulnerable to ReDoS via filename parsing

Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles