https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:12:30 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-02886 bdu:2021-02886 https://cve.radiocsirt.org/vuln/bdu:2021-02886 https://cve.radiocsirt.org/vuln/certfr-2022-avi-767 certfr-2022-avi-767 https://cve.radiocsirt.org/vuln/certfr-2022-avi-767 https://cve.radiocsirt.org/vuln/cnvd-2019-01745 cnvd-2019-01745 https://cve.radiocsirt.org/vuln/cnvd-2019-01745 https://cve.radiocsirt.org/vuln/euvd-2026-169008 EUVD-2026-169008 https://cve.radiocsirt.org/vuln/euvd-2026-169008 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16137 <p>The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.</p> <p>The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16137 https://cve.radiocsirt.org/vuln/ghsa-gxpj-cx7g-858c <p><strong>Affected:</strong> npm: debug</p> <p>Affected versions of `debug` are vulnerable to regular expression denial of service when untrusted user input is passed into the `o` formatter.</p> <p>As it takes 50,000 characters to block the event loop for 2 seconds, this issue is a low severity issue.</p> <p>This was later re-introduced in version v3.2.0, and then repatched in versions 3.2.7 and 4.3.1.</p> <p>## Recommendation</p> <p>Version 2.x.x: Update to version 2.6.9 or later. Version 3.1.x: Update to version 3.1.0 or later. Version 3.2.x: Update to version 3.2.7 or later. Version 4.x.x: Update to version 4.3.1 or later.</p> <p><strong>Affected:</strong> npm: debug</p> <p>Affected versions of `debug` are vulnerable to regular expression denial of service when untrusted user input is passed into the `o` formatter.</p> <p>As it takes 50,000 characters to block the event loop for 2 seconds, this issue is a low severity issue.</p> <p>This was later re-introduced in version v3.2.0, and then repatched in versions 3.2.7 and 4.3.1.</p> <p>## Recommendation</p> <p>Version 2.x.x: Update to version 2.6.9 or later. Version 3.1.x: Update to version 3.1.0 or later. Version 3.2.x: Update to version 3.2.7 or later. Version 4.x.x: Update to version 4.3.1 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-gxpj-cx7g-858c https://cve.radiocsirt.org/vuln/gsd-2017-16137 gsd-2017-16137 https://cve.radiocsirt.org/vuln/gsd-2017-16137 https://cve.radiocsirt.org/vuln/rhsa-2021:3917 <p>nodejs-debug: Regular expression Denial of Service nodejs-mime: Regular expression Denial of Service nodejs-is-my-json-valid: ReDoS when validating JSON fields with email format nodejs-braces: Regular Expression Denial of Service (ReDoS) in lib/parsers.js lodash: Prototype pollution in utilities function hoek: Prototype pollution in utilities function nodejs-url-parse: incorrect hostname in url parsing nodejs-extend: Prototype pollution can allow attackers to modify object properties nodejs-stringstream: out-of-bounds read leading to uninitialized memory exposure nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS lodash: uncontrolled resource consumption in Data handler causing denial of service nodejs-yargs-parser: prototype pollution vulnerability nodejs-lodash: prototype pollution in zipObjectDeep function nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function nodejs-highlight-js: prototype pollution via a crafted HTML code block urijs: Hostname spoofing via backslashes in URL python-pillow: Buffer over-read in PCX image reader python-pillow: decoding crafted YCbCr files could result in heap-based buffer overflow browserslist: parsing of invalid queries could result in Regular Expression Denial of Service (ReDoS) nodejs-postcss: Regular expression denial of service during source map parsing no…</p> <p>nodejs-debug: Regular expression Denial of Service nodejs-mime: Regular expression Denial of Service nodejs-is-my-json-valid: ReDoS when validating JSON fields with email format nodejs-braces: Regular Expression Denial of Service (ReDoS) in lib/parsers.js lodash: Prototype pollution in utilities function hoek: Prototype pollution in utilities function nodejs-url-parse: incorrect hostname in url parsing nodejs-extend: Prototype pollution can allow attackers to modify object properties nodejs-stringstream: out-of-bounds read leading to uninitialized memory exposure nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS lodash: uncontrolled resource consumption in Data handler causing denial of service nodejs-yargs-parser: prototype pollution vulnerability nodejs-lodash: prototype pollution in zipObjectDeep function nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function nodejs-highlight-js: prototype pollution via a crafted HTML code block urijs: Hostname spoofing via backslashes in URL python-pillow: Buffer over-read in PCX image reader python-pillow: decoding crafted YCbCr files could result in heap-based buffer overflow browserslist: parsing of invalid queries could result in Regular Expression Denial of Service (ReDoS) nodejs-postcss: Regular expression denial of service during source map parsing no…</p> https://cve.radiocsirt.org/vuln/rhsa-2021:3917 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-16137 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-debug</p> <p>The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: node-debug</p> <p>The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-16137