Skip to content
OpenAdvisories
High DLA-3480-1 1 CVE

ruby-redcloth - security update

Published Jul 6, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 ruby-redcloth 4.3.2-3+deb10u1

Vulnerabilities 1

  • High 7.5
    CVE-2023-31606 Public exploit

    RedCloth Regular Expression Denial of Service issue

    A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

    RedCloth ruby-redcloth ruby-redcloth Debian Ubuntu RubyGems