https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:53:05 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0276 certfr-2023-avi-0276 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0276 https://cve.radiocsirt.org/vuln/euvd-2026-226526 EUVD-2026-226526 https://cve.radiocsirt.org/vuln/euvd-2026-226526 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25927 <p>Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.</p> <p>Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25927 https://cve.radiocsirt.org/vuln/ghsa-fhg7-m89q-25r3 <p><strong>Affected:</strong> npm: ua-parser-js</p> <p>### Description: A regular expression denial of service (ReDoS) vulnerability has been discovered in `ua-parser-js`.</p> <p>### Impact: This vulnerability bypass the library&#39;s `MAX_LENGTH` input limit prevention. By crafting a very-very-long user-agent string with specific pattern, an attacker can turn the script to get stuck processing for a very long time which results in a denial of service (DoS) condition.</p> <p>### Affected Versions: From version `0.7.30` to before versions `0.7.33` / `1.0.33`.</p> <p>### Patches: A patch has been released to remove the vulnerable regular expression, update to version `0.7.33` / `1.0.33` or later.</p> <p>### References: [Regular expression Denial of Service - ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS)</p> <p>### Credits: Thanks to @Snyk who first reported the issue.</p> <p><strong>Affected:</strong> npm: ua-parser-js</p> <p>### Description: A regular expression denial of service (ReDoS) vulnerability has been discovered in `ua-parser-js`.</p> <p>### Impact: This vulnerability bypass the library&#39;s `MAX_LENGTH` input limit prevention. By crafting a very-very-long user-agent string with specific pattern, an attacker can turn the script to get stuck processing for a very long time which results in a denial of service (DoS) condition.</p> <p>### Affected Versions: From version `0.7.30` to before versions `0.7.33` / `1.0.33`.</p> <p>### Patches: A patch has been released to remove the vulnerable regular expression, update to version `0.7.33` / `1.0.33` or later.</p> <p>### References: [Regular expression Denial of Service - ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS)</p> <p>### Credits: Thanks to @Snyk who first reported the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-fhg7-m89q-25r3 https://cve.radiocsirt.org/vuln/gsd-2022-25927 gsd-2022-25927 https://cve.radiocsirt.org/vuln/gsd-2022-25927 https://cve.radiocsirt.org/vuln/msrc_cve-2022-25927 msrc_CVE-2022-25927 https://cve.radiocsirt.org/vuln/msrc_cve-2022-25927 https://cve.radiocsirt.org/vuln/rhsa-2023:1428 <p>gin: Unsanitized input in the default logger in github.com/gin-gonic/gin express: &#34;qs&#34; prototype poisoning causes the hang of the node process http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability ua-parser-js: ReDoS vulnerability via the trim() function loader-utils: Regular expression denial of service decode-uri-component: improper input validation resulting in DoS json5: Prototype Pollution in JSON5 via Parse Method jszip: directory traversal via a crafted ZIP archive</p> <p>gin: Unsanitized input in the default logger in github.com/gin-gonic/gin express: &#34;qs&#34; prototype poisoning causes the hang of the node process http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability ua-parser-js: ReDoS vulnerability via the trim() function loader-utils: Regular expression denial of service decode-uri-component: improper input validation resulting in DoS json5: Prototype Pollution in JSON5 via Parse Method jszip: directory traversal via a crafted ZIP archive</p> https://cve.radiocsirt.org/vuln/rhsa-2023:1428 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25927 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-ua-parser-js, Ubuntu:20.04:LTS: node-ua-parser-js, Ubuntu:22.04:LTS: node-ua-parser-js, Ubuntu:24.04:LTS: node-ua-parser-js, Ubuntu:25.10: node-ua-parser-js, Ubuntu:26.04:LTS: node-ua-parser-js</p> <p>Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: node-ua-parser-js, Ubuntu:20.04:LTS: node-ua-parser-js, Ubuntu:22.04:LTS: node-ua-parser-js, Ubuntu:24.04:LTS: node-ua-parser-js, Ubuntu:25.10: node-ua-parser-js, Ubuntu:26.04:LTS: node-ua-parser-js</p> <p>Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25927 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0809 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0809