tocsin

Debian/rails: high 7.5

A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a stat

Action: Upgrade rails to 2:6.1.7.3+dfsg-1 or later.

Affected

introducedfixedlast affected
02:6.1.7.3+dfsg-1-

Fixed versions

2:6.1.7.3+dfsg-1

Sources

published · modified · JSON