CVE-2024-43380

fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sigh...

CVE-2024-43380 fugit parse and parse_nat stall on lengthy input

fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sigh...

CVE-2024-43380 fugit parse and parse_nat stall on lengthy input

fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sigh...

CVE-2024-43380 fugit parse and parse_nat stall on lengthy input

fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sigh...

CVE-2024-43380

fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sigh...

CVE-2024-43380

CVE-2024-43380 affects the fugit component used by the floraison group. The issue stems from the fugit "natural" parser, which converts phrases like “every Wednesday at 5pm” to a cron expression. It accepted inputs of any length and could continue parsing without returning, causing an uncontrolle...

PT-2024-30542 · Fugit +1 · Fugit +1

Name of the Vulnerable Software and Affected Versions: fugit versions prior to 1.11.1 Description: The fugit "natural" parser, which turns natural language into cron expressions, accepted any length of input and attempted to parse it without returning promptly. This could cause the parse call to...

fugit 安全漏洞

fugit is a floraison open source time tool for Ruby, rufus-scheduler and flor. A security vulnerability exists in versions of fugit prior to 1.11.1, which stems from improper user input length checking, and may result in a thread being occupied for an extended period of time without being able to...

fugit parse and parse_nat stall on lengthy input

Impact The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check user input leng...

MAL-2024-7214 Malicious code in @zitterorg/fugit-ex-neque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f7f3694766a66580a12a7935f3749211f56225ef96551bdb577e24042976270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7265 Malicious code in @zitterorg/magni-fugit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bff259cab9c3552983723d051cbcc330f579dd185f7abedb479244f652544ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/magni-fugit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bff259cab9c3552983723d051cbcc330f579dd185f7abedb479244f652544ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/aut-fugit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97a9ca54db44e97b047436fd35587dbeab1f9cfc0955a5aad6c0c1c08b299738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/quia-fugit-magni (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03c4fb2c1d7fb71690ce98ab0f1ba3a0f1000ed36edc8528061893d1ff2367c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/fugit-odit-fugiat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aac1efba4a0cd6714c50de7989f3e1da7329d3358e0172881655617f86b3d93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7215 Malicious code in @zitterorg/fugit-odit-fugiat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aac1efba4a0cd6714c50de7989f3e1da7329d3358e0172881655617f86b3d93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...