Denial Of Service (DoS)

encodedid-rails is vulnerable to Denial of service attack. The vulnerability is due to a lack of validation while decoding hashid. Extremely long encoded id's consumes a large amount of CPU and allocates immediate objects. maxlength parameter is introduced to fix this vulnerability which limits t...