Search Vulnerabilities

Apache Thrift: Node.js quadratic-time DoS in server receive transports

Quadratic CPU blow-up reassembling fragmented WebSocket messages in Bandit

MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service

pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

Parse Server: Denial of service via exponential-time processing of deeply nested query operators

py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()

Elysia: Inefficient Algorithmic Complexity and Interpretation Conflict

Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions

inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)

linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

js-yaml: YAML merge-key chains can force quadratic CPU consumption

js-yaml: YAML merge-key chains can force quadratic CPU consumption

js-yaml quadratic-complexity denial of service via YAML11_SCHEMA !!omap parsing

Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpax

Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store

Denial of Service in fzf

brace-expansion through 5

decode-uri-component through 0