EUVD-2021-0633

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

PostgreSQL adapter in Active Record suffers from a regular expression denial of service vulnerability.

Reporter	Title	Published	Views	Family All 71
FreeBSD	Rails -- multiple vulnerabilities	10 Feb 202100:00	–	freebsd
AstraLinux	Astra Linux - уязвимость в rails	3 May 202623:59	–	astralinux
Circl	CVE-2021-22880	11 Feb 202120:42	–	circl
CNNVD	Postgresql PostgreSQL 资源管理错误漏洞	11 Feb 202100:00	–	cnnvd
CNVD	PostgreSQL Resource Management Error Vulnerability (CNVD-2021-14792)	25 Feb 202100:00	–	cnvd
CVE	CVE-2021-22880	11 Feb 202116:11	–	cve
Cvelist	CVE-2021-22880	11 Feb 202116:11	–	cvelist
Debian	[SECURITY] [DSA 4929-1] rails security update	9 Jun 202121:11	–	debian
Debian CVE	CVE-2021-22880	11 Feb 202116:11	–	debiancve
Tenable Nessus	Debian DSA-4929-1 : rails - security update	11 Jun 202100:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "4cfc28ec-f802-3763-840d-20495ec19c41",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-22880
hackerone	www.hackerone.com/reports/1023899
discuss	www.discuss.rubyonrails.org/t/cve-2021-22880-possible-dos-vulnerability-in-active-record-postgresql-adapter/77129
github	www.github.com/rails/rails
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2021-22880.yml
groups	www.groups.google.com/g/rubyonrails-security/c/ZzUqCh9vyhI
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MO5OJ3F4ZL3UXVLJO6ECANRVZBNRS2IH
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/XQ3NS4IBYE2I3MVMGAHFZBZBIZGHXHT3
security	www.security.netapp.com/advisory/ntap-20210805-0009
debian	www.debian.org/security/2021/dsa-4929

07 Oct 2025 00:30Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.5

CVSS 25

EPSS0.02599