CWE-185— Incorrect Regular Expression
The product specifies a regular expression in a way that causes data to be improperly matched or compared.— MITRE CWE catalog
56 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-185page 2 of 2
- CVE-2018-20164MEDIUMCVSS 5.3EG 5.32019-02-13
An issue was discovered in regex.yaml (aka regexes.yaml) in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service (ReDoS) issue allows remote attackers to overload a server by setting the User-Agent header in an HTTP(S) r…
- CVE-2018-7537MEDIUMCVSS 5.3EG 5.32018-03-09
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they were extremely slow to evaluate certain i…
- CVE-2018-7536MEDIUMCVSS 5.3EG 5.32018-03-09
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize() function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two r…
- CVE-2020-7016MEDIUMCVSS 4.8EG 4.82020-07-27
Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresp…
- CVE-2026-73425LOWCVSS 3.7EG 3.72026-08-12
Astro is a web framework for content-driven websites. Prior to 8.1.2, the Astro Netlify adapter converts each image.remotePatterns entry into a regular expression written to .netlify/v1/config.json under images.remote_images for Netlify's …
- CVE-2026-64655LOWCVSS 2.1EG 2.12026-08-06
GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex me…
Map vulnerabilities like CWE-185 to your infrastructure
EchelonGraph correlates every CVE — across CWE-185 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →