https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 23 Jul 2026 01:08:50 +0000 https://db.gcve.eu/sighting/06441e1c-48e8-4c39-898a-b095a101d2bc/export {"uuid": "06441e1c-48e8-4c39-898a-b095a101d2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-26305", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqf7b6vk5525", "content": "", "creation_timestamp": "2026-07-11T17:37:07.044311Z"} {"uuid": "06441e1c-48e8-4c39-898a-b095a101d2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-26305", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqf7b6vk5525", "content": "", "creation_timestamp": "2026-07-11T17:37:07.044311Z"} https://db.gcve.eu/sighting/06441e1c-48e8-4c39-898a-b095a101d2bc/export Sat, 11 Jul 2026 17:37:07 +0000 https://db.gcve.eu/sighting/91f2c43a-1c82-49e9-b481-59926e0ddb31/export {"uuid": "91f2c43a-1c82-49e9-b481-59926e0ddb31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-26304", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqf5ljzg6x2o", "content": "", "creation_timestamp": "2026-07-11T17:07:06.432355Z"} {"uuid": "91f2c43a-1c82-49e9-b481-59926e0ddb31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-26304", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqf5ljzg6x2o", "content": "", "creation_timestamp": "2026-07-11T17:07:06.432355Z"} https://db.gcve.eu/sighting/91f2c43a-1c82-49e9-b481-59926e0ddb31/export Sat, 11 Jul 2026 17:07:06 +0000 https://db.gcve.eu/sighting/cc9dc986-9b4d-4489-a186-4a1c42346e53/export {"uuid": "cc9dc986-9b4d-4489-a186-4a1c42346e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-26303", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqf3vuyrpc2m", "content": "", "creation_timestamp": "2026-07-11T16:37:06.514850Z"} {"uuid": "cc9dc986-9b4d-4489-a186-4a1c42346e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-26303", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqf3vuyrpc2m", "content": "", "creation_timestamp": "2026-07-11T16:37:06.514850Z"} https://db.gcve.eu/sighting/cc9dc986-9b4d-4489-a186-4a1c42346e53/export Sat, 11 Jul 2026 16:37:06 +0000 https://db.gcve.eu/sighting/d69408c5-37b7-40e1-8a37-8b7ca3032928/export {"uuid": "d69408c5-37b7-40e1-8a37-8b7ca3032928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26302", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11625", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2020-26302\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to loop \u201cforever.\" This vulnerability was found using a CodeQL query which identifies inefficient regular expressions. is.js has no patch for this issue.\n\ud83d\udccf Published: 2022-12-23T23:03:51.372Z\n\ud83d\udccf Modified: 2025-04-14T14:37:16.925Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js\n2. https://github.com/arasatasaygin/is.js/issues/320", "creation_timestamp": "2025-04-14T14:53:52.000000Z"} {"uuid": "d69408c5-37b7-40e1-8a37-8b7ca3032928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26302", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11625", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2020-26302\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to loop \u201cforever.\" This vulnerability was found using a CodeQL query which identifies inefficient regular expressions. is.js has no patch for this issue.\n\ud83d\udccf Published: 2022-12-23T23:03:51.372Z\n\ud83d\udccf Modified: 2025-04-14T14:37:16.925Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js\n2. https://github.com/arasatasaygin/is.js/issues/320", "creation_timestamp": "2025-04-14T14:53:52.000000Z"} https://db.gcve.eu/sighting/d69408c5-37b7-40e1-8a37-8b7ca3032928/export Mon, 14 Apr 2025 14:53:52 +0000 https://db.gcve.eu/sighting/0ddf8876-6aed-43ef-9a29-53ded2f7b837/export {"uuid": "0ddf8876-6aed-43ef-9a29-53ded2f7b837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26307", "type": "seen", "source": "https://t.me/cvedetector/9043", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26307 - HTML2Markdown ReDoS Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26307 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:05.000000Z"} {"uuid": "0ddf8876-6aed-43ef-9a29-53ded2f7b837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26307", "type": "seen", "source": "https://t.me/cvedetector/9043", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26307 - HTML2Markdown ReDoS Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26307 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:05.000000Z"} https://db.gcve.eu/sighting/0ddf8876-6aed-43ef-9a29-53ded2f7b837/export Sun, 27 Oct 2024 00:01:05 +0000 https://db.gcve.eu/sighting/666e3354-78e1-4801-8438-38449f3d6f4b/export {"uuid": "666e3354-78e1-4801-8438-38449f3d6f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26306", "type": "seen", "source": "https://t.me/cvedetector/9042", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26306 - Knwl.js Regular Expression Denial of Service (ReDoS) Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26306 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Versions 1.0.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:05.000000Z"} {"uuid": "666e3354-78e1-4801-8438-38449f3d6f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26306", "type": "seen", "source": "https://t.me/cvedetector/9042", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26306 - Knwl.js Regular Expression Denial of Service (ReDoS) Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26306 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Versions 1.0.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:05.000000Z"} https://db.gcve.eu/sighting/666e3354-78e1-4801-8438-38449f3d6f4b/export Sun, 27 Oct 2024 00:01:05 +0000 https://db.gcve.eu/sighting/b88bb023-e58d-4ea8-8a7b-7702a1d8a2c1/export {"uuid": "b88bb023-e58d-4ea8-8a7b-7702a1d8a2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26305", "type": "seen", "source": "https://t.me/cvedetector/9041", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26305 - CommonRegexJS Regular Expression Denial of Service (ReDoS)\", \n \"Content\": \"CVE ID : CVE-2020-26305 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:04.000000Z"} {"uuid": "b88bb023-e58d-4ea8-8a7b-7702a1d8a2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26305", "type": "seen", "source": "https://t.me/cvedetector/9041", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26305 - CommonRegexJS Regular Expression Denial of Service (ReDoS)\", \n \"Content\": \"CVE ID : CVE-2020-26305 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:04.000000Z"} https://db.gcve.eu/sighting/b88bb023-e58d-4ea8-8a7b-7702a1d8a2c1/export Sun, 27 Oct 2024 00:01:04 +0000 https://db.gcve.eu/sighting/acacbe26-3374-4e1b-83b0-3675080ab2f4/export {"uuid": "acacbe26-3374-4e1b-83b0-3675080ab2f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26304", "type": "seen", "source": "https://t.me/cvedetector/9040", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26304 - Foundation Regular Expression Denial of Service (ReDoS) Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26304 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any fixes are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:03.000000Z"} {"uuid": "acacbe26-3374-4e1b-83b0-3675080ab2f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26304", "type": "seen", "source": "https://t.me/cvedetector/9040", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26304 - Foundation Regular Expression Denial of Service (ReDoS) Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26304 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any fixes are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:03.000000Z"} https://db.gcve.eu/sighting/acacbe26-3374-4e1b-83b0-3675080ab2f4/export Sun, 27 Oct 2024 00:01:03 +0000 https://db.gcve.eu/sighting/2c3d7b11-33ba-42c7-be4e-da58d9c48591/export {"uuid": "2c3d7b11-33ba-42c7-be4e-da58d9c48591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26303", "type": "seen", "source": "https://t.me/cvedetector/9039", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26303 - Insane HTML Sanitizer ReDoS Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26303 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:00.000000Z"} {"uuid": "2c3d7b11-33ba-42c7-be4e-da58d9c48591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26303", "type": "seen", "source": "https://t.me/cvedetector/9039", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26303 - Insane HTML Sanitizer ReDoS Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26303 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:00.000000Z"} https://db.gcve.eu/sighting/2c3d7b11-33ba-42c7-be4e-da58d9c48591/export Sun, 27 Oct 2024 00:01:00 +0000 https://db.gcve.eu/sighting/324c885e-e744-4183-a7b4-cbcc0732082a/export {"uuid": "324c885e-e744-4183-a7b4-cbcc0732082a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26309", "type": "seen", "source": "https://t.me/cvedetector/9037", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26309 - Validate.js Regular Expression Denial of Service (ReDoS) Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26309 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:00:58.000000Z"} {"uuid": "324c885e-e744-4183-a7b4-cbcc0732082a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26309", "type": "seen", "source": "https://t.me/cvedetector/9037", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2020-26309 - Validate.js Regular Expression Denial of Service (ReDoS) Vulnerability\", \n \"Content\": \"CVE ID : CVE-2020-26309 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:00:58.000000Z"} https://db.gcve.eu/sighting/324c885e-e744-4183-a7b4-cbcc0732082a/export Sun, 27 Oct 2024 00:00:58 +0000