Most recent entries from all

EUVD-2026-183171

2026-10-03T17:22:28.639820+00:00

EUVD-2026-183171

fkie_cve-2022-25887

2026-10-03T17:22:28.639865+00:00

The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal.

GHSA-cgfm-xwp7-2cvr — Sanitize-html Vulnerable To REDoS Attacks

2026-10-03T17:22:28.639899+00:00

Affected: npm: sanitize-html

The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal.

gsd-2022-25887

2026-10-03T17:22:28.639923+00:00

gsd-2022-25887

RHSA-2022:7313 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.2 security update and bug fixes

2026-10-03T17:22:28.639936+00:00

search-api: SQL injection leads to remote denial of service terser: insecure use of regular expressions leads to ReDoS sanitize-html: insecure global regular expression replacement logic may lead to ReDoS passport: incorrect session regeneration moment: inefficient parsing algorithm resulting in DoS

UBUNTU-CVE-2022-25887

2026-10-03T17:22:28.639964+00:00

Affected: Ubuntu:22.04:LTS: node-sanitize-html, Ubuntu:Pro:22.04:LTS: jupyter-notebook, Ubuntu:24.04:LTS: node-sanitize-html, Ubuntu:Pro:24.04:LTS: jupyter-notebook, Ubuntu:25.10: jupyter-notebook, Ubuntu:25.10: node-sanitize-html, Ubuntu:26.04:LTS: jupyter-notebook, Ubuntu:26.04:LTS: node-sanitize-html

The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal.

WID-SEC-W-2022-2368 — HCL BigFix: Mehrere Schwachstellen

2026-10-03T17:22:28.639996+00:00

Ein Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um die Verfügbarkeit, die Vertraulichkeit und die Integrität zu gefährden.