Most recent entries from all

certfr-2023-avi-0428 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre…

certfr-2023-avi-0428

EUVD-2026-170429

fkie_cve-2022-25858

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

GHSA-4wf5-vphf-c2xc — Terser insecure use of regular expressions leads to ReDoS

Affected: npm: terser

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

gsd-2022-25858

msrc_CVE-2022-25858 — Regular Expression Denial of Service (ReDoS)

msrc_CVE-2022-25858

RHSA-2022:6835 — Red Hat Security Advisory: Service Registry (container images) release and security update [2.3.0.GA]

protobuf-java: potential DoS in the parsing procedure for binary data netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way cron-utils: template Injection leading to unauthenticated Remote Code Execution node-fetch: exposure of sensitive information to an unauthorized actor follow-redirects: Exposure of Sensitive Information via Authorization Header leak quarkus: privilege escalation vulnerability with RestEasy Reactive scope leakage in Quarkus jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes prismjs: improperly escaped output allows a XSS node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery node-forge: Signature verification leniency in checking `DigestInfo` structure com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson snakeyaml: Denial of Service due to missing nested depth limitation for collections terser: insecure use of regular expressions leads to ReDoS postgresql-jdbc: Arbitrary File Write Vulnerability moment: inefficient parsing algorithm resulting in DoS graphql-java: DoS by malicious query

UBUNTU-CVE-2022-25858

Affected: Ubuntu:20.04:LTS: node-terser, Ubuntu:22.04:LTS: node-terser, Ubuntu:22.04:LTS: qt6-webengine, Ubuntu:24.04:LTS: node-terser, Ubuntu:24.04:LTS: qt6-webengine, Ubuntu:25.10: node-terser, Ubuntu:25.10: qt6-webengine, Ubuntu:26.04:LTS: node-terser, Ubuntu:26.04:LTS: qt6-webengine

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

WID-SEC-W-2022-1603 — IBM Tivoli Netcool/OMNIbus: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Tivoli Netcool/OMNIbus ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.