2 matches found
GHSA-VM74-J4WQ-82XJ Sisimai Inefficient Regular Expression Complexity vulnerability
A vulnerability has been found in Sisimai up to 4.25.14p11 and classified as problematic. This vulnerability affects the function toplain of the file lib/sisimai/string.rb. The manipulation leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be...
CVE-2022-4891
CVE-2022-4891 affects the Ruby library Sisimai up to version 4.25.14p11, impacting the function to_plain in lib/sisimai/string.rb. The issue is inefficient regular expression complexity (redos) that could be exploited once disclosed. A patch is available: upgrade to 4.25.14p12; patch identifier i...