CVE-2022-4891

RubyGems/sisimai CVE-2022-4891: medium 4.3, EPSS 1.35%

Sisimai Inefficient Regular Expression Complexity vulnerability

Action: Upgrade sisimai to 4.25.14p12 or later.

bundle update sisimai

Affected

Fixed versions

Sources

• osv: GHSA-vm74-j4wq-82xj
• https://nvd.nist.gov/vuln/detail/CVE-2022-4891
• https://github.com/sisimai/rb-sisimai/pull/244
• https://github.com/sisimai/rb-sisimai/commit/51fe2e6521c9c02b421b383943dc9e4bbbe65d4e
• https://gist.githubusercontent.com/gmcabrita/e5dc0332473fc2e3a7a407434c8d21c7/raw/00b12035e5e1b685469f143b94301a50306376ba/example.html
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sisimai/CVE-2022-4891.yml
• https://github.com/sisimai/rb-sisimai
• https://github.com/sisimai/rb-sisimai/releases/tag/v4.25.14p12
• https://vuldb.com/?ctiid.218452
• https://vuldb.com/?id.218452

CVE-2022-4891 · published 2023-01-17T21:30:22Z · modified 2026-02-22T23:09:38.471873Z · JSON