CVE-2024-0241
1 advisory.
RubyGems/encoded_id-rails CVE-2024-0241: high 7.5, EPSS 1.11%
encoded_id-rails potential DOS vulnerability due to URIs with extremely long encoded IDs
Action: Upgrade encoded_id-rails to 1.0.0.beta2 or later.
bundle update encoded_id-railsAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0.beta2 | - |
Fixed versions
| 1.0.0.beta2 |
Sources
- osv: GHSA-3px7-jm2p-6h2c
- https://github.com/stevegeek/encoded_id-rails/security/advisories/GHSA-3px7-jm2p-6h2c
- https://nvd.nist.gov/vuln/detail/CVE-2024-0241
- https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/encoded_id-rails/CVE-2024-0241.yml
- https://github.com/stevegeek/encoded_id-rails
CVE-2024-0241 · published · modified · JSON