CWE-1333 · 458 records
Inefficient Regular Expression Complexity
CVEs in this class
458 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
43Plan | CVE-2023-3364No exploit | Inefficient Regular Expression Complexity in GitLabgitlab · gitlab · CWE-1333 | High7.5 | — | 44.4% | Aug 1, 2023 |
42Plan | CVE-2024-8124No exploit | Inefficient Regular Expression Complexity in GitLabgitlab · gitlab · CWE-1333 | High7.5 | — | 40.2% | Sep 12, 2024 |
41Plan | CVE-2024-25126No exploit | Rack ReDos in content type parsing (2nd degree polynomial)rack · rack · CWE-1333 | High7.5 | — | 35.3% | Feb 28, 2024 |
40Plan | CVE-2026-82617No exploit | Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patternsapache · opennlp · CWE-1333 | Critical10.0 | — | 0.7% | Sep 11, 2026 |
39Monitor | CVE-2021-32837No exploit | mechanize vulnerable to ReDoSmechanize project · mechanize · CWE-1333 | High7.5 | — | 28.8% | Jan 17, 2023 |
39Monitor | CVE-2023-29486No exploit | An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictionsheimdalsecurity · thor · CWE-1333 | Critical9.8 | — | 1.0% | Dec 20, 2023 |
39Monitor | CVE-2025-62484No exploit | Zoom Workplace Clients - Inefficient Regular Expression Complexityzoom · meeting software development kit · CWE-1333 | Critical9.8 | — | 0.3% | Nov 13, 2025 |
38Monitor | CVE-2024-2829No exploit | Inefficient Regular Expression Complexity in GitLabgitlab · gitlab · CWE-1333 | High7.5 | — | 25.9% | Apr 25, 2024 |
36Monitor | CVE-2024-2651No exploit | Inefficient Regular Expression Complexity in GitLabgitlab · gitlab · CWE-1333 | Medium6.5 | — | 33.3% | May 14, 2024 |
36Monitor | CVE-2025-25200Proof of concept | Koa has Inefficient Regular Expression Complexitykoajs · koa · CWE-1333 | Critical9.2 | — | 0.8% | Feb 12, 2025 |
36Monitor | CVE-2023-29487No exploit | An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to cause heimdalsecurity · thor · CWE-1333 | Critical9.1 | — | 0.6% | Dec 20, 2023 |
36Monitor | CVE-2026-25547No exploit | Uncontrolled Resource Consumption in @isaacs/brace-expansionisaacs · brace-expansion · CWE-1333 | Critical9.2 | — | 0.5% | Feb 4, 2026 |
34Monitor | CVE-2025-6998Proof of concept | Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoScalibre web · calibre web · CWE-1333 | High8.7 | — | 0.9% | Jul 24, 2025 |
34Monitor | CVE-2026-71190No exploit | In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtrackiopenstack · swift · CWE-1333 | High8.7 | — | 0.8% | Aug 5, 2026 |
34Monitor | CVE-2026-72818No exploit | NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Inputnltk · nltk · CWE-1333 | High8.7 | — | 0.7% | Aug 20, 2026 |
34Monitor | CVE-2026-45305No exploit | Symfony: YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup() Regexsensiolabs · symfony · CWE-1333 | High8.7 | — | 0.6% | Jul 14, 2026 |
34Monitor | CVE-2026-80205No exploit | NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regexnltk · nltk · CWE-1333 | High8.7 | — | 0.6% | Aug 26, 2026 |
34Monitor | CVE-2026-33079No exploit | Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titleslepture · mistune · CWE-1333 | High8.7 | — | 0.5% | May 6, 2026 |
34Monitor | CVE-2026-103043No exploit | anchorme through 3.0.8 Regular Expression Denial of Servicealexcorvi · anchorme · CWE-1333 | High8.7 | — | 0.5% | Sep 29, 2026 |
34Monitor | CVE-2026-47138No exploit | Parse Server: Pre-authentication denial of service via client version header regex backtrackingparse-community · parse-server · CWE-1333 | High8.7 | — | 0.5% | Jun 12, 2026 |
34Monitor | CVE-2026-55574No exploit | vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backendsvllm · vllm · CWE-1333 | High8.7 | — | 0.5% | Jul 6, 2026 |
34Monitor | CVE-2026-92599No exploit | Joi before 17.13.7 and 18.2.6 ReDoS via isoDatehapijs · joi · CWE-1333 | High8.7 | — | 0.5% | Sep 16, 2026 |
34Monitor | CVE-2026-26996No exploit | minimatch has a ReDoS via repeated wildcards with non-matching literal in patternminimatch project · minimatch · CWE-1333 | High8.7 | — | 0.5% | Feb 19, 2026 |
34Monitor | CVE-2020-26303No exploit | GHSL-2020-289: Regular Expression Denial of Service (ReDoS) in insanebevacqua · insane · CWE-1333 | High8.7 | — | 0.5% | Oct 26, 2024 |
34Monitor | CVE-2020-26304No exploit | GHSL-2020-290: Regular Expression Denial of Service (ReDoS) in foundation-sitesfoundation · foundation · CWE-1333 | High8.7 | — | 0.5% | Oct 26, 2024 |
- CVE-2023-336443Plan
Inefficient Regular Expression Complexity in GitLab
HighCVSS 7.5No exploitEPSS 44%gitlab · gitlabAug 1, 2023
- CVE-2024-812442Plan
Inefficient Regular Expression Complexity in GitLab
HighCVSS 7.5No exploitEPSS 40%gitlab · gitlabSep 12, 2024
- CVE-2024-2512641Plan
Rack ReDos in content type parsing (2nd degree polynomial)
HighCVSS 7.5No exploitEPSS 35%rack · rackFeb 28, 2024
- CVE-2026-8261740Plan
Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns
CriticalCVSS 10.0No exploitEPSS 0%apache · opennlpSep 11, 2026
- CVE-2021-3283739Monitor
mechanize vulnerable to ReDoS
HighCVSS 7.5No exploitEPSS 28%mechanize project · mechanizeJan 17, 2023
- CVE-2023-2948639Monitor
An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions
CriticalCVSS 9.8No exploitEPSS 1%heimdalsecurity · thorDec 20, 2023
- CVE-2025-6248439Monitor
Zoom Workplace Clients - Inefficient Regular Expression Complexity
CriticalCVSS 9.8No exploitEPSS 0%zoom · meeting software development kitNov 13, 2025
- CVE-2024-282938Monitor
Inefficient Regular Expression Complexity in GitLab
HighCVSS 7.5No exploitEPSS 25%gitlab · gitlabApr 25, 2024
- CVE-2024-265136Monitor
Inefficient Regular Expression Complexity in GitLab
MediumCVSS 6.5No exploitEPSS 33%gitlab · gitlabMay 14, 2024
- CVE-2025-2520036Monitor
Koa has Inefficient Regular Expression Complexity
CriticalCVSS 9.2Proof of conceptEPSS 0%koajs · koaFeb 12, 2025
- CVE-2023-2948736Monitor
An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to cause
CriticalCVSS 9.1No exploitEPSS 0%heimdalsecurity · thorDec 20, 2023
- CVE-2026-2554736Monitor
Uncontrolled Resource Consumption in @isaacs/brace-expansion
CriticalCVSS 9.2No exploitEPSS 0%isaacs · brace-expansionFeb 4, 2026
- CVE-2025-699834Monitor
Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS
HighCVSS 8.7Proof of conceptEPSS 0%calibre web · calibre webJul 24, 2025
- CVE-2026-7119034Monitor
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracki
HighCVSS 8.7No exploitEPSS 0%openstack · swiftAug 5, 2026
- CVE-2026-7281834Monitor
NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input
HighCVSS 8.7No exploitEPSS 0%nltk · nltkAug 20, 2026
- CVE-2026-4530534Monitor
Symfony: YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex
HighCVSS 8.7No exploitEPSS 0%sensiolabs · symfonyJul 14, 2026
- CVE-2026-8020534Monitor
NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex
HighCVSS 8.7No exploitEPSS 0%nltk · nltkAug 26, 2026
- CVE-2026-3307934Monitor
Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles
HighCVSS 8.7No exploitEPSS 0%lepture · mistuneMay 6, 2026
- CVE-2026-10304334Monitor
anchorme through 3.0.8 Regular Expression Denial of Service
HighCVSS 8.7No exploitEPSS 0%alexcorvi · anchormeSep 29, 2026
- CVE-2026-4713834Monitor
Parse Server: Pre-authentication denial of service via client version header regex backtracking
HighCVSS 8.7No exploitEPSS 0%parse-community · parse-serverJun 12, 2026
- CVE-2026-5557434Monitor
vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
HighCVSS 8.7No exploitEPSS 0%vllm · vllmJul 6, 2026
- CVE-2026-9259934Monitor
Joi before 17.13.7 and 18.2.6 ReDoS via isoDate
HighCVSS 8.7No exploitEPSS 0%hapijs · joiSep 16, 2026
- CVE-2026-2699634Monitor
minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern
HighCVSS 8.7No exploitEPSS 0%minimatch project · minimatchFeb 19, 2026
- CVE-2020-2630334Monitor
GHSL-2020-289: Regular Expression Denial of Service (ReDoS) in insane
HighCVSS 8.7No exploitEPSS 0%bevacqua · insaneOct 26, 2024
- CVE-2020-2630434Monitor
GHSL-2020-290: Regular Expression Denial of Service (ReDoS) in foundation-sites
HighCVSS 8.7No exploitEPSS 0%foundation · foundationOct 26, 2024