CWE-1333 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-1333 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-110594BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that all…0.6%보통6.9CVE-2026-89407NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates "stringified numbers" wit…0.6%높음7.5CVE-2026-118779Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript.…0.6%높음7.5CVE-2026-68497jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGrego…0.6%높음7.5CVE-2026-92114A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of…0.5%보통6.9CVE-2026-118259opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and …0.5%보통5.3CVE-2026-114603OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, the opentel…0.5%보통5.3CVE-2026-116588Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, the defaul…0.5%높음8.7
전체 목록
89건
CVE-2026-118772joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, …0.5%높음7.5
CVE-2026-116795RE2JS is the JavaScript port of RE2, a regular expression engine that provides linear time matching. From 2.2.…0.5%높음7.5
CVE-2026-115728@hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vulnerability in Content…0.5%높음8.7
CVE-2026-77422JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in gre…0.5%높음7.5
CVE-2026-76821OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to …0.5%높음7.1
CVE-2026-116693dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DD_TRACE_OBFU…0.4%높음8.7
CVE-2026-86000Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, the selector par…0.4%보통5.3
CVE-2026-93761An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid …0.5%높음8.7
CVE-2026-103043anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extracti…0.4%높음8.7
CVE-2026-57577DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-fin…0.4%높음8.2
CVE-2026-119202@hapi/content provides HTTP Content-* header parsing. From 3.0.6 until 6.0.3, Content.disposition() uses an un…0.4%높음7.5
CVE-2026-77421JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in nan…0.4%보통6.5
CVE-2026-63460Vendure is an open-source headless commerce platform. Prior to 3.6.5, the public Shop GraphQL API allows an un…0.4%높음7.5
CVE-2026-115887GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schemas. From 1.…0.4%높음7.5
CVE-2026-96292Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift L…0.4%높음8.2
CVE-2026-104861probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parse_sync/svg…0.4%높음7.5
CVE-2026-107290Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.…0.4%보통6.5
CVE-2026-112300A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function…0.4%보통6.9
CVE-2026-104454YesWiki before 4.6.7 contains an algorithmic-complexity denial of service in the wakka.php formatter due to an…0.4%보통6.9
CVE-2026-101906Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypass…0.4%높음8.2
CVE-2026-101903Axios is a promise-based HTTP client for the browser and Node.js. From 1.16.1 until 1.20.0, the RFC 2397 regul…0.4%높음8.2
CVE-2026-77423JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in les…0.4%높음7.5
CVE-2026-104150AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.2 and 9.1…0.4%높음8.7
CVE-2026-108082Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to ver…0.4%높음8.7
CVE-2026-85999Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, selector_iter in…0.4%보통5.3
CVE-2026-102990basic-ftp is an FTP client for Node.js. Prior to 6.2.1, Client.list() can be forced by a malicious or compromi…0.4%높음8.2
CVE-2026-118686EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulnerability in which the password-…0.3%높음8.7
CVE-2026-82617The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT_REGEX…0.3%심각10.0
CVE-2026-115349Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulnerability in the pars…0.3%높음8.7
CVE-2026-92599joi (npm package `joi`, hapi.js) versions >=17.2.0 <17.13.7 and >=18.0.0 <18.2.6 are vulnerable to regular exp…0.3%높음8.7
CVE-2026-105219Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map …0.4%높음8.7
CVE-2026-62864Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack. Prior to 1.15.5, `wrap-n…0.3%높음7.5
CVE-2026-109563N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number patter…0.4%높음8.7
CVE-2026-112366Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to…0.3%높음8.7
CVE-2026-58270Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to vers…0.3%보통6.5
CVE-2026-102408Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regula…0.3%보통4.3
CVE-2026-67989crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expressio…0.3%높음7.5
CVE-2026-86081n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone …0.3%높음7.1
CVE-2026-106454Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, …0.3%보통4.3
CVE-2026-105646Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import file could cau…0.3%보통4.9
CVE-2026-105645Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external medi…0.3%보통4.9
CVE-2026-67419RabbitMQ is a messaging and streaming broker. Prior to 4.3.5, an authenticated user who can bind a queue to a …0.3%높음7.1
CVE-2026-66074RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, mat…0.3%보통6.0
CVE-2026-59966Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to …0.3%보통5.7
CVE-2026-115508Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker …0.3%높음7.1
CVE-2026-87722Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search query predicates (such as RegexProjectP…0.3%높음8.7
CVE-2026-119300Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publicati…0.3%보통6.5
CVE-2026-110869Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whos…0.3%높음8.7
CVE-2026-105854Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and…0.3%높음8.7
CVE-2026-104628Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerabilit…0.3%높음7.1
CVE-2026-107572Inefficient complexity in the Sieve filter evaluation of Progressive Robot hMailServer 6.2.24 through 6.3.5 al…0.3%보통6.5
CVE-2026-109295Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows…0.3%높음7.1
CVE-2026-116285HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing…0.3%미평가
CVE-2026-85062Colord is a tiny yet powerful tool for high-performance color manipulations and conversions. Prior to 2.9.4, s…0.3%보통6.9
CVE-2026-75880An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results…0.3%보통6.5
CVE-2026-112901Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expre…0.3%보통6.9
CVE-2026-67413RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional …0.3%보통6.0
CVE-2026-87819GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_rege…0.3%높음8.7
CVE-2026-106104Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platfor…0.3%높음8.7
CVE-2026-118037In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infi…0.3%높음7.5
CVE-2026-54461Habitica is a habit tracker application that treats goals like a role-playing game. From 4.172.1 until 5.48.2,…0.3%보통6.5
CVE-2026-115822Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chu…0.3%미평가
CVE-2026-120217A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of t…0.3%낮음2.1
CVE-2026-100267In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters0.3%보통5.9
CVE-2026-110856GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pa…0.3%높음8.7
CVE-2026-117500HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a m…0.3%미평가
CVE-2026-118646n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that all…0.2%높음7.1
CVE-2026-67240RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, pattern_to_regex maps % -> .*…0.3%낮음2.3
CVE-2026-111997ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and applicatio…0.3%보통6.3
CVE-2026-115866Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when …0.2%미평가
CVE-2026-111714tarteaucitron.js before 1.37.0 contains a regular expression denial of service vulnerability that allows attac…0.2%낮음2.3
CVE-2026-77387geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point and Point.from_string() can spend excessi…0.2%보통4.0
CVE-2026-102270PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT is_pem_format is affected…0.2%보통4.4
CVE-2026-116268MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header para…0.2%미평가
CVE-2026-118993CallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a reg…0.2%미평가
CVE-2026-102473A flaw was found in dash. When built without libc fnmatch, the internal pmatch() matcher implements * by unbou…0.1%보통5.5
CVE-2026-77420JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPa…0.1%보통5.5
CVE-2026-120645CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup se…미평가
CVE-2026-120632CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XForms multipart/relate…미평가
CVE-2026-120631CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires valu…미평가
CVE-2026-121577Inefficient Regular Expression Complexity (CWE-1333) in generate_regex() (whatstk/whatsapp/parser.py) in whats…보통6.7
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.