ansi-regex is vulnerable to Inefficient Regular Expression Complexity
The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ansi-regex | Ansi-regex_project | 4.0.0 (including) | 4.1.1 (excluding) |
| Ansi-regex | Ansi-regex_project | 3.0.0 (including) | 3.0.0 (including) |
| Ansi-regex | Ansi-regex_project | 5.0.0 (including) | 5.0.0 (including) |
| Ansi-regex | Ansi-regex_project | 6.0.0 (including) | 6.0.0 (including) |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | acm-grafana-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | acm-must-gather-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | acm-operator-bundle-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | application-ui-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | assisted-image-service-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | cert-policy-controller-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | cluster-backup-operator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | clusterclaims-controller-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | cluster-curator-controller-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | clusterlifecycle-state-metrics-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | cluster-proxy-addon-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | config-policy-controller-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | console-api-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | console-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | discovery-operator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | endpoint-monitoring-operator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | governance-policy-propagator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | governance-policy-spec-sync-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | governance-policy-status-sync-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | governance-policy-template-sync-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | grafana-dashboard-loader-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | grc-ui-api-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | grc-ui-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | iam-policy-controller-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | insights-client-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | insights-metrics-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | klusterlet-addon-controller-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | klusterlet-addon-operator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | klusterlet-operator-bundle-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | kube-rbac-proxy-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | kube-state-metrics-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | managedcluster-import-controller-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | management-ingress-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | memcached-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | memcached-exporter-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | metrics-collector-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | multicloud-integrations-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | multicloud-manager-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | multiclusterhub-operator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | multiclusterhub-repo-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | multicluster-observability-operator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | multicluster-operators-application-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | multicluster-operators-channel-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | multicluster-operators-deployable-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | multicluster-operators-placementrule-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | multicluster-operators-subscription-operator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | multicluster-operators-subscription-release-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | node-exporter-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | observatorium-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | observatorium-operator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | openshift-hive-operator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | placement-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | prometheus-alertmanager-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | prometheus-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | provider-credential-controller-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | rbac-query-proxy-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | redisgraph-tls-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | registration-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | registration-operator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | rhacm-agent-service-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | rhacm-assisted-installer-agent-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | rhacm-assisted-installer-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | rhacm-assisted-installer-reporter-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | search-aggregator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | search-api-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | search-collector-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | search-operator-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | search-ui-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | submariner-addon-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | thanos-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | thanos-receive-controller-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | volsync-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | volsync-mover-rclone-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | volsync-mover-restic-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | volsync-mover-rsync-container | * |
| Red Hat Advanced Cluster Management for Kubernetes 2 | RedHat | work-container | * |
| Red Hat Enterprise Linux 8 | RedHat | nodejs:16-8050020211206113934.c5368500 | * |
| Red Hat Enterprise Linux 8 | RedHat | nodejs:14-8050020211213115342.c5368500 | * |
| Red Hat Enterprise Linux 8 | RedHat | nodejs:16-8060020220805104227.ad008a3a | * |
| Red Hat Enterprise Linux 8.4 Extended Update Support | RedHat | nodejs:14-8040020211213111158.522a0ee4 | * |
| Red Hat Enterprise Linux 9 | RedHat | nodejs-nodemon-0:2.0.19-1.el9_0 | * |
| Red Hat Fuse 7.11 | RedHat | io.hawt-hawtio-online | * |
| Red Hat Fuse 7.11 | RedHat | io.hawt-project | * |
| Red Hat Migration Toolkit for Containers 1.6 | RedHat | rhmtc/openshift-migration-ui-rhel8:v1.6.5-8 | * |
| Red Hat Migration Toolkit for Containers 1.7 | RedHat | rhmtc/openshift-migration-ui-rhel8:v1.7.2-9 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | RedHat | rh-nodejs14-nodejs-0:14.18.2-1.el7 | * |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | RedHat | rh-nodejs14-nodejs-nodemon-0:2.0.3-6.el7 | * |
| Red Hat Virtualization Engine 4.4 | RedHat | ovirt-engine-ui-extensions-0:1.3.3-1.el8ev | * |
| Red Hat Virtualization Engine 4.4 | RedHat | ovirt-web-ui-0:1.9.0-1.el8ev | * |
| RHODF-4.13-RHEL-9 | RedHat | odf4/mcg-core-rhel9:v4.13.0-41 | * |
| Node-ansi-regex | Ubuntu | bionic | * |
| Node-ansi-regex | Ubuntu | hirsute | * |
| Node-ansi-regex | Ubuntu | impish | * |
| Node-ansi-regex | Ubuntu | kinetic | * |
| Node-ansi-regex | Ubuntu | lunar | * |
| Node-ansi-regex | Ubuntu | mantic | * |
| Node-ansi-regex | Ubuntu | trusty | * |
| Node-ansi-regex | Ubuntu | xenial | * |
Attackers can create crafted inputs that
intentionally cause the regular expression to use
excessive backtracking in a way that causes the CPU
consumption to spike.