Fallos del tipo CWE-1333

410 resultados

Expressão regular com complexidade exponencial (ReDoS)

A aplicação usa uma regex mal construída que, em casos adversários, força o mecanismo de busca a testar um número exponencial de combinações antes de decidir se há match. Isso consome CPU descontroladamente e pode derrubar a aplicação com um padrão de entrada pequeno e cuidadosamente crafted.

Ejemplo

Um formulário valida email com regex como `(a+)+b`. Se você enviar uma string com muitos 'a's e nenhum 'b' no final, o mecanismo tenta todas as formas possíveis de agrupar aqueles 'a's antes de falhar, gastando segundos ou minutos em uma entrada de 30 caracteres.

Cómo mitigar

Evite quantificadores aninhados (tipo `(x+)+`, `(x*)*`), use âncoras e alternativas específicas, e defina timeouts para execução de regex. Teste com ferramentas como regex101 ou Regex Tester e considere parsing estruturado em vez de regex quando possível.

CVE-2021-4437LOWdbartholomae lambda-middleware frameguard JSON Mime-Type JsonDeserializer.ts redosEPSS 0.4%CVE-2026-0621HIGHMCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoSEPSS 0.4%CVE-2026-48125MEDIUMUAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`EPSS 0.4%CVE-2026-82617CRITICALApache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patternsEPSS 0.4%CVE-2026-86000MEDIUMSoup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patternsEPSS 0.4%CVE-2026-22691LOWpypdf has possible long runtimes for malformed startxrefEPSS 0.4%CVE-2026-62237MEDIUMGrav < 2.0.4 ReDoS via regex_replace in SandboxEPSS 0.4%CVE-2025-3263MEDIUMRegular Expression Denial of Service (ReDoS) in huggingface/transformersEPSS 0.4%CVE-2025-3933MEDIUMRegular Expression Denial of Service (ReDoS) in huggingface/transformersEPSS 0.4%CVE-2025-3264MEDIUMRegular Expression Denial of Service (ReDoS) in huggingface/transformersEPSS 0.4%CVE-2025-3262MEDIUMRegular Expression Denial of Service (ReDoS) in huggingface/transformersEPSS 0.4%CVE-2026-8888HIGHCVE-2026-8888EPSS 0.4%CVE-2026-57577HIGHDotVVM: ReDOS in routingEPSS 0.4%CVE-2026-39320HIGHSignal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription PathsEPSS 0.4%CVE-2025-53539MEDIUMReDoS in fastapi-guard's penetration attempts detectorEPSS 0.4%CVE-2026-6850MEDIUMCrafted message attachment causes client-side denial of service via markdown parser regex backtracking in MattermostEPSS 0.4%CVE-2025-54796HIGHCopyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" pageEPSS 0.4%CVE-2025-48058MEDIUMPowSyBl Core contains Polynomial REDoS’esEPSS 0.4%CVE-2026-23985MEDIUMApache Superset: Regular Expression Denial of Service (ReDoS) in SQL ParserEPSS 0.4%CVE-2026-75880MEDIUMApache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of serviceEPSS 0.4%