RE2JS: Quadratic-time denial of service in re2js lookbehind matching

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

RE2JS is the JavaScript port of RE2, a regular expression engine that provides linear time matching. From 2.2.0 until 2.8.7, enabling LOOKBEHINDS and using repeated matching through matcher().find(), matchAll(), split(), or matcher().replaceAll() can cause quadratic total work. Machine.match restarts lookbehind scanning from offset zero for each requested start position, while Matcher-based APIs request capture slots that prevent the early exit used for captureless matching. Dense matches therefore repeatedly rescan the input, allowing attacker-influenced text to monopolize a single-threaded worker and deny service. This issue is fixed in version 2.8.7.

Etkilenen sürümler1 yazılım

Kaynaklar6 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…/re2js/security/advisories/GHSA-gg6h-894w-4m9c Diğer
• github.com/le0pard/re2js/pull/59 Diğer
• github.com/…ommit/dfdd947785dfa113bdc97416375c246a39458395 Diğer
• github.com/le0pard/re2js/releases/tag/2.8.7 Diğer

Kayıt geçmişi

1. 28 Eki 2026 20:14Yayımlandı

İlgili açıklar

• 7,5 CVE-2026-118686EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex
• 6,5 CVE-2026-118646n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node
• 5,3 CVE-2026-118259opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing
• 7,5 CVE-2026-118037Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing
• 7,5 CVE-2026-118036Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering
• 7,5 CVE-2026-118035Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing