Search Vulnerabilities

GROWI provided by GROWI, Inc

Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths

Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

Zod jsVideoUrlParser util.js getTime redos

ReDoS in fast-jwt when using RegExp in allowed* leading to CPU exhaustion during token verification

Addressable has a Regular Expression Denial of Service in Addressable templates

Gotenberg has a ReDoS via extraHttpHeaders scope feature

Regular Expression Denial of Service (ReDoS) in @hapi/content HTTP header parsing

PraisonAI: ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()

Picomatch has a ReDoS vulnerability via extglob quantifiers

Libssh: libssh: denial of service via inefficient regular expression processing

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards

path-to-regexp vulnerable to Denial of Service via sequential optional groups

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters

Rails Active Support has a possible ReDoS vulnerability in number_to_delimited

pygments archetype.py AdlLexer redos

OpenClaw < 2026.2.19 - ReDoS and Regex Injection via Unescaped Feishu Mention Metadata

ReDoS in multipart 1.3.0 - `parse_options_header()`

Elysia has a string URL format redos

Parse Server affected by Regular Expression Denial of Service (ReDoS) via `$regex` query in LiveQuery