Inefficient Regular Expression Complexity

Every one of the 546 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Inefficient Regular Expression Complexity in GitLabCVE-2023-3364GitLab · CVSS 7.5 · 44% likely

   GitLab

2. Inefficient Regular Expression Complexity in GitLabCVE-2024-8124GitLab · CVSS 7.5 · 40% likely

   GitLab

3. Rack ReDos in content type parsing (2nd degree polynomial)CVE-2024-25126rack · CVSS 5.3 · 35% likely

   Rack Project1 bounty report

4. Inefficient Regular Expression Complexity in GitLabCVE-2024-2651GitLab · CVSS 6.5 · 33% likely

   GitLab

5. mechanize vulnerable to ReDoSCVE-2021-32837python-mechanize · CVSS 7.5 · 29% likely
6. Inefficient Regular Expression Complexity in GitLabCVE-2024-2829GitLab · CVSS 7.5 · 26% likely

   GitLab

7. Inefficient Regular Expression Complexity in axios/axiosCVE-2021-3749axios · CVSS 7.5 · 8.5% likely

   Axios

8. The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReD…CVE-2015-8315Vercel · CVSS 7.5 · 7.0% likely

   Vercel

9. Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name InjectionCVE-2026-44496axios · CVSS 7.5 · 5.4% likely

   Axios

10. Regular Expression Denial of Service (ReDoS)CVE-2022-25844Angularjs · CVSS 5.3 · 4.9% likely

    Angularjs

11. The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that trigger a "catastrophic backtracking issue…CVE-2015-8854Marked Project · 4.4% likely

    Marked Project

12. In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic wor…CVE-2021-27291Pygments · 3.9% likely
13. In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is…CVE-2022-41323Djangoproject · CVSS 7.5 · 3.8% likely

    Djangoproject1 bounty report

14. Regular Expression Denial of Service (ReDoS)CVE-2021-23362Npmjs · CVSS 5.3 · 3.6% likely

    Npmjs

15. Inefficient Regular Expression Complexity in chalk/ansi-regexCVE-2021-3807chalk · CVSS 7.5 · 3.6% likely
16. Inefficient Regular Expression Complexity in NokogiriCVE-2022-24836sparklemotion · CVSS 7.5 · 3.5% likely

    Sparklemotion

17. Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.CVE-2021-41817Ruby-Lang · 3.5% likely

    Ruby-Lang1 bounty report

18. Regular Expression Denial of Service (ReDoS)CVE-2022-25858Terser · CVSS 5.3 · 3.3% likely
19. Cubic catastrophic backtracking (ReDoS) in markedCVE-2022-21680markedjs · CVSS 7.5 · 3.0% likely
20. In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack…CVE-2023-36053Djangoproject · CVSS 7.5 · 3.0% likely

    Djangoproject

21. Regular Expression Denial of Service (ReDoS)CVE-2021-23446Handsontable · CVSS 7.5 · 3.0% likely
22. Exponential catastrophic backtracking (ReDoS) in markedCVE-2022-21681markedjs · CVSS 7.5 · 2.9% likely
23. A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in inte…CVE-2022-37599Webpack.js · 2.8% likely

    Webpack.js

24. Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a ra…CVE-2022-25883Npmjs · CVSS 5.3 · 2.8% likely

    Npmjs

25. A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateNa…CVE-2022-37603Webpack.js · CVSS 7.5 · 2.7% likely

    Webpack.js

26. Apache ShenYu (incubating) Regular expression denial of serviceCVE-2022-26650Apache Software Foundation · 2.7% likely

    Apache

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.