CVE-2026-33169

The connected advisory GHSA-CG4J-Q9V8-6V38 reports a ReDoS vulnerability in Rails Active Support: NumberToDelimitedConverter uses a gsub! regex for thousands delimiting, potentially causing quadratic time on long digit strings. Affected component: Active Support’s NumberToDelimitedConverter. Impa...