Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/23 8:52 p.m.5 views

GHSA-CG4J-Q9V8-6V38 Rails Active Support has a possible ReDoS vulnerability in number_to_delimited

Impact NumberToDelimitedConverter used a regular expression with gsub! to insert thousands delimiters. This could produce quadratic time complexity on long digit strings. Releases The fixed releases are available at the normal locations. Credit This issue was responsibly reported by Hackerone...

6.9CVSS6.5AI score0.00498EPSS
SaveExploits0References10
Rows per page
Query Builder