CWE-624: Executable Regular Expression Error
Filter
The product uses a regular expression that either (1) contains an executable component with user-controlled inputs, or (2) allows a user to enable execution by inserting pattern modifiers.
What the weakness is: CWE-624 at MITRE. All weaknesses
Ask an AI about CWE-624
Show the prompt
Explain CWE-624: Executable Regular Expression Error and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/624.html and https://cve.bz/cve/cwe/624?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.5CVE-2026-113877EPSS 0.7%
HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. _language_match interpolates each Accept-Language range into the pattern `/^$range\-/i` without escapi…
- 7.5CVE-2026-97076EPSS 0.3%
Executable Regular Expression Error vulnerability in WP Media WP Rocket wp-rocket allows Code Injection.This issue affects WP Rocket: from n/a before 3.23.5.
- 9.2CVE-2026-25237EPSS 0.5%
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content reaches …
- 7.5CVE-2024-41655EPSS 0.8%
TF2 Item Format helps users format TF2 items to the community standards. Versions of `tf2-item-format` since at least `4.2.6` and prior to `5.9.14` are vulnerable to a Regular Expression Denial of Service (ReDoS) attack when parsing craft…