Lucene search
+L

1 matches found

OSV
OSV
added 2024/05/29 8:18 p.m.6 views

CVE-2024-35221 Denial of service when publishing a package on rubygems.org

Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when publishing a Gem. This is due to how Ruby reads the Manifest of Gem files when using Gem::Specification.fromyaml. fromyaml makes use of SafeYAML.load which allows YAML aliases inside the YAML-bas...

4.3CVSS6.9AI score0.00494EPSS
SaveExploits0References5
Rows per page
Query Builder