Most recent entries from all

EUVD-2026-184020

2026-10-08T20:20:41.994695+00:00

EUVD-2026-184020

fkie_cve-2021-23354

2026-10-08T20:20:41.994744+00:00

The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string /\%(?:$([\w_.]+)$|([1-9]\d*)\$)?([0 +\-\]*)(\*|\d+)?(\.)?(\*|\d+)?[hlL]?([\%bscdeEfFgGioOuxX])/g in lib/printf.js. The vulnerable regular expression has cubic worst-case time complexity.

GHSA-xfhp-gmh8-r8v2 — printf vulnerable to Regular Expression Denial of Service (ReDoS)

2026-10-08T20:20:41.994780+00:00

Affected: npm: printf

The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string ```regex /\%(?:$([\w_.]+)$|([1-9]\d*)\$)?([0 +\-\]*)(\*|\d+)?(\.)?(\*|\d+)?[hlL]?([\%bscdeEfFgGioOuxX])/g ``` in `lib/printf.js`. The vulnerable regular expression has cubic worst-case time complexity.

gsd-2021-23354

2026-10-08T20:20:41.994806+00:00

gsd-2021-23354