EUVD-2017-0214

Malware in sbrugna...

sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number

The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service via a large exponent value in a scientific number...

CVE-2014-9490

The raven-ruby gem prior to 0.12.2 contains a vulnerability in lib/raven/okjson.rb where the numtok function can be triggered by large exponents in scientific numbers, enabling remote DoS. Impact is a denial of service as described in multiple advisories (e.g., GHSA-C9C5-9FPR-M882). A fix is avai...