CWE-1333: Regular expression denial of service (ReDoS)

Gst-plugins-base: gst-plugins-base: quadratic regex processing in srt/webvtt subtitle parser causes denial of service

Red Hat · Red Hat Enterprise Linux 10

Automation-controller: automation-controller: quadratic regex in schedule rrule validation allows an authenticated user to exhaust api web workers (denial of service)

Red Hat · Red Hat Ansible Automation Platform 2

IBM API Connect Denial of Service

IBM · API Connect

Symfony: Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process

sensiolabs · symfony

Parse Server 9.0.0 before 9.10.7-alpha.1 ReDoS via Email Validation Regex

parse-community · parse-server

CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list

CGI

CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XForms multipart/related Content-Type

CGI

CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parse

CGI

Unescaped header separators in whatstk build a regular expression that backtracks exponentially

lucasrodes · whatstk

Delgan loguru ANSI Color-Markup _colorizer.py AnsiParser.feed redos

Delgan · loguru