Skip to content
OpenAdvisories

Package · Alpine

ruby-activesupport

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Low —

    ReDoS based DoS vulnerability in Active Support's underscore

    A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process …