Incorrect Regular Expression

Every one of the 37 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize() function was extremely slow to evaluate certain inpu…CVE-2018-75364.6% likely
2. An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars() and words() methods were passed the html=T…CVE-2018-75374.4% likely
3. The `'path'` module in the Node.js 4.x release line contains a potential regular expression denial of service (ReDoS) vector. The code in question was replaced in Node.js 6.x and…CVE-2018-7158The Node.js Project · 3.5% likely

   Node.js

4. An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading to code execution. This is exploitable by authenticate…CVE-2018-179843.4% likely
5. An issue was discovered in regex.yaml (aka regexes.yaml) in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service (ReDoS) issue allows remote attackers to overlo…CVE-2018-201643.3% likely
6. In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a denial of service attack against the SVGRe…CVE-2018-208013.2% likely
7. Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding,…CVE-2019-149932.3% likely
8. An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size, leading to an overflow of the parsed syntax list size.CVE-2019-127981.7% likely
9. Cisco IOS and IOS XE Software Split DNS Denial of Service VulnerabilityCVE-2020-3408Cisco · CVSS 8.6 · 1.6% likely

   Cisco

10. A vulnerability was found in Braces versions 2.2.0 and above, prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) atta…CVE-2018-1109nodejs-braces · 1.4% likely
11. Specially crafted regex query can cause DoSCVE-2020-7929MongoDB Inc. · CVSS 6.5 · 1.3% likely

    MongoDB

12. DoS attack using PostMaster filtersCVE-2021-36093OTRS AG · CVSS 5.3 · 1.1% likely

    OTRS AG

13. authentik has an insecure default configuration for OAuth2 Redirect URIsCVE-2024-52289goauthentik · CVSS 7.9 · 1.1% likely

    Goauthentik

14. Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kiban…CVE-2020-7016Elastic · 1.1% likely

    Elastic

15. A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified CORS allowed origins during installation. An attacker, abl…CVE-2020-1741Red Hat · CVSS 5.9 · 0.9% likely

    Red Hat

16. fastapi-guard patch contains bypassable RegExCVE-2025-54365rennf93 · CVSS 7.8 · 0.9% likely
17. Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypassCVE-2026-111057mljar · CVSS 10 · 0.7% likely
18. A vulnerability in chat messaging features of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. T…CVE-2025-20139Cisco · CVSS 7.5 · 0.7% likely

    Cisco

19. fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity namesCVE-2026-25896NaturalIntelligence · CVSS 9.3 · 0.5% likely

    NaturalIntelligence

20. Incorrect Regular Expression in GravityZone Update Server (VA-11465)CVE-2024-2223Bitdefender · CVSS 8.1 · 0.5% likely

    Bitdefender

21. LAM has incorrect regular expression in PDF export component that allows user to upload files of any typeCVE-2026-27895LDAPAccountManager · CVSS 4.3 · 0.5% likely

    LDAPAccountManager

22. follow-redirects sensitiveHeaders regex escaping can expose credential headersCVE-2026-111755follow-redirects · CVSS 8.2 · 0.5% likely

    Follow-Redirects

23. Incorrect Regular Expression vulnerability in GitHub Enterprise Server allowed unauthorized access to user accounts via OAuth callback URL validation bypassCVE-2026-4296GitHub · CVSS 7.5 · 0.4% likely

    GitHub

24. @dicebear/converter ensureSize() Vulnerable to SVG Dimension Capping Bypass via XML Comment InjectionCVE-2026-33418dicebear · CVSS 7.5 · 0.4% likely
25. Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass ValidationCVE-2026-3419fastify · CVSS 5.3 · 0.4% likely

    Fastify

26. WP Hardening – Fix Your WordPress Security <= 1.2.6 - Unauthenticated Security Feature Bypass to Username EnumerationCVE-2024-6641astrasecuritysuite · CVSS 5.3 · 0.4% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.