Lucene search
+L

23 matches found

Github Security Blog
Github Security Blog
•added 2026/06/30 6:32 p.m.•33 views

oban_web: Unbounded range expansion in cron describe causes memory exhaustion

Summary obanweb 2.12.0 introduced a cron expression parser that expands --separated ranges without validating the endpoints. An attacker with access to schedule cron jobs can submit a malicious expression; when any user with dashboard access views the cron job list, Oban.Web.CronExpr.describe/1 i...

5.9CVSS5.9AI score0.00466EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder