Skip to content
OpenAdvisories

Package · RubyGems

date

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2021-41817

    Regular expression denial of service vulnerability (ReDoS) in date

    Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.

    ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Alpine RubyGems