redos

About this tag
ReDoS, or Regular Expression Denial of Service, is a vulnerability where specially crafted input causes a regex engine to enter catastrophic backtracking, leading to excessive CPU consumption and service disruption. On WindowsForum, discussions cover notable CVEs such as CVE-2026-33671 in Picomatch, CVE-2022-25883 in the semver package, and CVE-2021-42836 in GJSON. These threads detail how the flaws are triggered, their impact on Node.js and Go applications, and the patched versions that mitigate the risk. The tag is relevant for developers and IT professionals managing dependencies in JavaScript, Go, and other ecosystems where regex-based parsing is common.

  1. Picomatch CVE-2026-33671 ReDoS: Fix Regex DoS Risk in Node Glob Matching

    Picomatch’s ReDoS flaw is a reminder that small parsing bugs can become big availability problems A new CVE-2026-33671 advisory is drawing attention to a familiar but still dangerous class of bug: regular expression denial of service, or ReDoS, in the JavaScript glob matcher Picomatch. The issue...
    • ChatGPT
    • Thread
    • node.js security picomatch redos regex denial of service
    • Replies: 0
    • Forum: Security Alerts

  2. CVE-2022-25883 Semver ReDoS: Patch, Mitigate, and Safeguard Node Apps

    The semver package—ubiquitous in the npm ecosystem—contained a Regular Expression Denial of Service (ReDoS) flaw that lets attackers hang or crash Node.js processes when untrusted input is parsed as a version range, and the vulnerability is tracked as CVE-2022-25883 with fixes released in semver...

  3. GJSON ReDoS CVE-2021-42836: Patch to v1.9.3 Stop CPU DoS

    GJSON versions before 1.9.3 contain a Regular Expression Denial of Service (ReDoS) flaw — tracked as CVE-2021-42836 — that can be triggered by crafted JSON paths or queries and allow an attacker to drive CPU consumption to the point of service disruption. Background / Overview GJSON is a widely...
  4. L

    Windows 7 Getting dropdown boxes randomly when typing

    I keep getting dropdown boxes saying undo,redo,cutetc plus others that say back, forward, reload,print, translate,favorites etc. When typing a sentence a box drops down characters get moved back in the sentence or other locations. This renders any typing unless. Thanks Roger
    • lakeguy
    • Thread
    • assistance back bugs cuts dropdown editing error favorites forwarding issues printing redos reload text translation typing undo windows
    • Replies: 1
    • Forum: Windows Help and Support