Falhas do tipo CWE-1333

407 resultados

Expressão regular com complexidade exponencial (ReDoS)

A aplicação usa uma regex que, em certos padrões de entrada, causa backtracking excessivo e consome CPU de forma exponencial. O motor regex tenta múltiplas combinações de correspondência antes de falhar ou suceder, podendo travar a aplicação ou deixá-la lenta demais para responder.

Exemplo

Um validador de email com regex como `(a+)+b` recebe a string `aaaaaaaaaaaaaaaaaaaaX` (sem o caractere final esperado). O motor testa todas as combinações de agrupamento do `a` repetido, levando tempo exponencial em relação ao tamanho da entrada.

Como mitigar

Use bibliotecas de parsing ou validação especializadas em vez de regex complexas (ex: bibliotecas de email ou URL). Se regex for necessária, teste com inputs longos malformados, limpe a entrada antes, ou use engines regex com proteção contra backtracking (como a do Rust).

CVE-2025-0367MEDIUMRegular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)EPSS 0.5%CVE-2025-48887MEDIUMvLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`EPSS 0.5%CVE-2023-6502MEDIUMInefficient Regular Expression Complexity in GitLabEPSS 0.5%CVE-2026-70656MEDIUMCheckmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced MatchingEPSS 0.5%CVE-2026-72818HIGHNLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like InputEPSS 0.5%CVE-2024-21539HIGHVersions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper inputEPSS 0.5%CVE-2025-46560MEDIUMvLLM phi4mm: Quadratic Time Complexity in Input Token Processing​ leads to denial of serviceEPSS 0.5%CVE-2025-69873LOWajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enaEPSS 0.5%CVE-2026-25547CRITICALUncontrolled Resource Consumption in @isaacs/brace-expansionEPSS 0.5%CVE-2025-6493MEDIUMCodeMirror Markdown Mode markdown.js redosEPSS 0.5%CVE-2026-33169MEDIUMRails Active Support has a possible ReDoS vulnerability in number_to_delimitedEPSS 0.5%CVE-2026-35458HIGHGotenberg has a ReDoS via extraHttpHeaders scope featureEPSS 0.5%CVE-2026-4867HIGHpath-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parametersEPSS 0.5%CVE-2025-61921LOWSinatra has ReDoS vulnerability in ETag header value generationEPSS 0.5%CVE-2026-30837HIGHElysia has a string URL format redosEPSS 0.5%CVE-2025-6492MEDIUMMarkText index.js getRecommendTitleFromMarkdownString redosEPSS 0.5%CVE-2026-26006MEDIUMRedos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogptEPSS 0.5%CVE-2024-1493MEDIUMUncontrolled Resource Consumption in GitLabEPSS 0.5%CVE-2026-80205HIGHNLTK before 3.10.0 ReDoS via Text.findall() unvalidated regexEPSS 0.5%CVE-2026-69207MEDIUMHono: ReDoS in CORS middleware via Access-Control-Request-HeadersEPSS 0.5%