{"vulnerability": "cve-2020-2630", "sightings": [{"uuid": "d69408c5-37b7-40e1-8a37-8b7ca3032928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26302", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11625", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2020-26302\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to loop \u201cforever.\" This vulnerability was found using a CodeQL query which identifies inefficient regular expressions. is.js has no patch for this issue.\n\ud83d\udccf Published: 2022-12-23T23:03:51.372Z\n\ud83d\udccf Modified: 2025-04-14T14:37:16.925Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js\n2. https://github.com/arasatasaygin/is.js/issues/320", "creation_timestamp": "2025-04-14T14:53:52.000000Z"}, {"uuid": "b88bb023-e58d-4ea8-8a7b-7702a1d8a2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26305", "type": "seen", "source": "https://t.me/cvedetector/9041", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2020-26305 - CommonRegexJS Regular Expression Denial of Service (ReDoS)\", \n  \"Content\": \"CVE ID : CVE-2020-26305 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:04.000000Z"}, {"uuid": "324c885e-e744-4183-a7b4-cbcc0732082a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26309", "type": "seen", "source": "https://t.me/cvedetector/9037", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2020-26309 - Validate.js Regular Expression Denial of Service (ReDoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2020-26309 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:00:58.000000Z"}, {"uuid": "fcdb9dca-baaf-4c34-858e-6e828c788717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26308", "type": "seen", "source": "https://t.me/cvedetector/9035", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2020-26308 - Validate.js ReDoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2020-26308 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:00:57.000000Z"}, {"uuid": "0ddf8876-6aed-43ef-9a29-53ded2f7b837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26307", "type": "seen", "source": "https://t.me/cvedetector/9043", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2020-26307 - HTML2Markdown ReDoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2020-26307 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : HTML2Markdown is a Javascript implementation for converting HTML to Markdown text. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:05.000000Z"}, {"uuid": "666e3354-78e1-4801-8438-38449f3d6f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26306", "type": "seen", "source": "https://t.me/cvedetector/9042", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2020-26306 - Knwl.js Regular Expression Denial of Service (ReDoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2020-26306 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Versions 1.0.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:05.000000Z"}, {"uuid": "acacbe26-3374-4e1b-83b0-3675080ab2f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26304", "type": "seen", "source": "https://t.me/cvedetector/9040", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2020-26304 - Foundation Regular Expression Denial of Service (ReDoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2020-26304 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any fixes are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:03.000000Z"}, {"uuid": "2c3d7b11-33ba-42c7-be4e-da58d9c48591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26303", "type": "seen", "source": "https://t.me/cvedetector/9039", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2020-26303 - Insane HTML Sanitizer ReDoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2020-26303 \nPublished : Oct. 26, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no known patches are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-27T00:01:00.000000Z"}, {"uuid": "fac7ce7f-91b1-4dad-803b-f750b2daac6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26302", "type": "seen", "source": "https://t.me/cibsecurity/55201", "content": "\u203c CVE-2020-26302 \u203c\n\nis.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to loop \u00c3\u00a2\u00e2\u201a\u00ac\u00c5\u201cforever.\" This vulnerability was found using a CodeQL query which identifies inefficient regular expressions. is.js has no patch for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T00:14:06.000000Z"}, {"uuid": "f3c69848-9951-4fa0-9c71-513ae7d58007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-26301", "type": "seen", "source": "https://t.me/cibsecurity/29163", "content": "\u203c CVE-2020-26301 \u203c\n\nssh2 is client and server modules written in pure JavaScript for node.js. In ssh2 before version 1.4.0 there is a command injection vulnerability. The issue only exists on Windows. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This is fixed in version 1.4.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-21T00:27:09.000000Z"}, {"uuid": "cc9dc986-9b4d-4489-a186-4a1c42346e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-26303", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqf3vuyrpc2m", "content": "", "creation_timestamp": "2026-07-11T16:37:06.514850Z"}, {"uuid": "91f2c43a-1c82-49e9-b481-59926e0ddb31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-26304", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqf5ljzg6x2o", "content": "", "creation_timestamp": "2026-07-11T17:07:06.432355Z"}, {"uuid": "06441e1c-48e8-4c39-898a-b095a101d2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-26305", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqf7b6vk5525", "content": "", "creation_timestamp": "2026-07-11T17:37:07.044311Z"}]}