Lucene search
+L

1 matches found

OSV
OSV
•added 2026/06/30 6:32 p.m.•21 views

GHSA-6XH2-93P9-VQH4 oban_web: Unbounded range expansion in cron describe causes memory exhaustion

Summary obanweb 2.12.0 introduced a cron expression parser that expands --separated ranges without validating the endpoints. An attacker with access to schedule cron jobs can submit a malicious expression; when any user with dashboard access views the cron job list, Oban.Web.CronExpr.describe/1 i...

5.9CVSS5.8AI score0.00466EPSS
SaveExploits0References7
Rows per page
Query Builder