RubyGems/user_agent_parser: high
Denial of Service in uap-core when processing crafted User-Agent strings
Action: Upgrade user_agent_parser to 2.6.0 or later.
bundle update user_agent_parserAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.0 | - |
Fixed versions
| 2.6.0 |
Sources
- osv: GHSA-pcqq-5962-hvcw
- https://github.com/ua-parser/uap-ruby/security/advisories/GHSA-pcqq-5962-hvcw
- https://github.com/ua-parser/uap-ruby/commit/2bb18268f4c5ba7d4ba0e21c296bf6437063da3a
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/user_agent_parser/GHSA-pcqq-5962-hvcw.yml
published · modified · JSON