redos

Records22

1. closed7.1
   Open WebUI CVE-2026-109298: Open WebUI vulnerable to regex denial of service in search tools

   Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109298

   AI
2. closed6.5
   Open WebUI CVE-2026-70493: Open WebUI vulnerable to regular expression denial of service

   Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70493

   AI
3. closed6.5
   Open WebUI CVE-2026-59220: Open WebUI ReDoS in skill-mention regexes causes DoS

   Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59220

   AI
4. closed8.7
   vLLM vLLM ReDoS vulnerability in structured outputs regex compilation

   Patch now · Disclosed · since 17 Jul 2026 · updated 17 Jul 2026 · CVE-2026-55574

   AI
5. closed7.5
   vLLM CVE-2025-71379: vLLM regular expression denial of service vulnerabilities

   Patch now · Disclosed · since 20 Jun 2026 · CVE-2025-71379

   AI
6. closed8.7
   LangChain family CVE-2024-58340: LangChain MRKLOutputParser regular expression denial-of-service

   Patch now · Disclosed · since 12 Jan 2026 · CVE-2024-58340

   AI
7. closed8.7
   MCP SDKs CVE-2026-0621: Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

   Patch now · Disclosed · since 5 Jan 2026 · CVE-2026-0621

   AI
8. closed5.3
   Hugging Face libraries CVE-2025-6921: Hugging Face Transformers vulnerable to ReDoS in optimizer

   Patch now · Disclosed · since 23 Sep 2025 · CVE-2025-6921

   AI
9. closed5.3
   Hugging Face libraries CVE-2025-6051: ReDoS vulnerability in Hugging Face Transformers EnglishNormalizer

   Patch now · Disclosed · since 14 Sep 2025 · CVE-2025-6051

   AI
10. closed5.3
    Hugging Face libraries CVE-2025-6638: Hugging Face Transformers vulnerable to ReDoS via MarianTokenizer

    Patch now · Disclosed · since 12 Sep 2025 · CVE-2025-6638

    AI
11. closed5.3
    Hugging Face libraries CVE-2025-5197: Hugging Face Transformers ReDoS Vulnerability

    Patch now · Disclosed · since 6 Aug 2025 · CVE-2025-5197

    AI
12. closed5.3
    Hugging Face libraries CVE-2025-3933: Transformers vulnerable to ReDoS in DonutProcessor

    Patch now · Disclosed · since 11 Jul 2025 · CVE-2025-3933

    AI
13. closed5.3
    Hugging Face libraries Hugging Face Transformers vulnerable to ReDoS in configuration utils

    Patch now · Disclosed · since 7 Jul 2025 · CVE-2025-3263

    AI
14. closed5.3
    Hugging Face libraries Hugging Face Transformers vulnerable to ReDoS in get_imports

    Patch now · Disclosed · since 7 Jul 2025 · CVE-2025-3264

    AI
15. closed5.3
    Hugging Face libraries Hugging Face Transformers vulnerable to ReDoS in SETTING_RE

    Patch now · Disclosed · since 7 Jul 2025 · CVE-2025-3262

    AI
16. closed6.5
    vLLM CVE-2025-48887: vLLM ReDoS Vulnerability in pythonic_tool_parser

    Patch now · Disclosed · since 28 May 2025 · updated 30 May 2025 · CVE-2025-48887

    AI
17. closed
    vLLM vLLM Regular Expression Denial of Service

    Patch now · Disclosed · since 28 May 2025

    AI
18. closed5.3
    Hugging Face libraries CVE-2025-2099: Hugging Face Transformers Regular Expression Denial of Service

    Patch now · Disclosed · since 19 May 2025 · CVE-2025-2099

    AI
19. closed4.3
    Hugging Face libraries CVE-2025-1194: Transformers Regular Expression Denial of Service Vulnerability

    Patch now · Disclosed · since 29 Apr 2025 · CVE-2025-1194

    AI
20. closed5.3
    Hugging Face libraries CVE-2024-12720: Transformers ReDoS Vulnerability

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12720

    AI
21. closed7.5
    Gradio CVE-2024-10624: Gradio Vulnerable to Denial of Service via Crafted HTTP Request

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-10624

    AI
22. closed5.1
    Langflow CVE-2024-9277: Langflow regular expression complexity vulnerability

    Patch now · Disclosed · since 27 Sep 2024 · CVE-2024-9277

    AI