Fallos del tipo CWE-1333

413 resultados

Expressão regular com complexidade exponencial (ReDoS)

A aplicação usa uma regex mal construída que, em casos adversários, força o mecanismo de busca a testar um número exponencial de combinações antes de decidir se há match. Isso consome CPU descontroladamente e pode derrubar a aplicação com um padrão de entrada pequeno e cuidadosamente crafted.

Ejemplo

Um formulário valida email com regex como `(a+)+b`. Se você enviar uma string com muitos 'a's e nenhum 'b' no final, o mecanismo tenta todas as formas possíveis de agrupar aqueles 'a's antes de falhar, gastando segundos ou minutos em uma entrada de 30 caracteres.

Cómo mitigar

Evite quantificadores aninhados (tipo `(x+)+`, `(x*)*`), use âncoras e alternativas específicas, e defina timeouts para execução de regex. Teste com ferramentas como regex101 ou Regex Tester e considere parsing estruturado em vez de regex quando possível.

CVE-2026-60075HIGHDate::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in _parse_timeEPSS 0.4%CVE-2026-5986MEDIUMZod jsVideoUrlParser util.js getTime redosEPSS 0.4%CVE-2026-70489MEDIUMOpen WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsingEPSS 0.4%CVE-2023-27704MEDIUMVoid Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service (ReDoS).EPSS 0.4%CVE-2026-55520HIGHProtego: Exponential backtracking ReDoS in robots.txt URL wildcard matchingEPSS 0.4%CVE-2026-48801HIGHlinkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loopEPSS 0.4%CVE-2026-41040HIGHGROWI provided by GROWI, Inc. is vulnerable to a regular expression denial of service (ReDoS) via a crafted input string.EPSS 0.4%CVE-2025-2811MEDIUMGL.iNet GL-A1300 Slate Plus API redosEPSS 0.4%CVE-2026-35611HIGHAddressable has a Regular Expression Denial of Service in Addressable templatesEPSS 0.4%CVE-2025-54364MEDIUMMicrosoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module. option_descriptions employs anEPSS 0.4%CVE-2026-10691MEDIUMwonderwhy-er DesktopCommanderMCP start_search search-manager.ts redosEPSS 0.4%CVE-2026-10291MEDIUMEnderfga claw-orchestrator Session Grep Endpoint embedded-server.ts validateRegex redosEPSS 0.4%CVE-2026-14741HIGHHTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_dateEPSS 0.4%CVE-2026-4923MEDIUMpath-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcardsEPSS 0.4%CVE-2026-85999MEDIUMSoup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)EPSS 0.4%CVE-2026-1388HIGHInefficient Regular Expression Complexity in GitLabEPSS 0.4%CVE-2025-7579MEDIUMchinese-poetry server.js redosEPSS 0.3%CVE-2026-9496HIGHVersions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attackEPSS 0.3%CVE-2026-92599HIGHJoi before 17.13.7 and 18.2.6 ReDoS via isoDateEPSS 0.3%CVE-2025-70034HIGHAn issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in mscdex ssh2 v1.17.0.EPSS 0.3%