{"action":"Upgrade activerecord to 5.2.4.5 or later.","affected":[{"fixed":"5.2.4.5","introduced":"5.0.0"},{"fixed":"6.0.3.5","introduced":"6.0.0"},{"fixed":"6.1.2.1","introduced":"6.1.0"}],"component":"activerecord","cve_ids":["CVE-2021-22880"],"ecosystem":"RubyGems","epss":0.04487,"exploited":false,"fixed_versions":["5.2.4.5","6.0.3.5","6.1.2.1"],"ghsa_id":"GHSA-8hc4-xxm3-5ppp","id":"tcs_01M5KEJ20J95GRG4ZE4PYSB6TV","modified_at":"2024-02-20T05:21:22.451179Z","published_at":"2021-03-02T03:44:14Z","references":["https://osv.dev/vulnerability/GHSA-8hc4-xxm3-5ppp","https://nvd.nist.gov/vuln/detail/CVE-2021-22880","https://hackerone.com/reports/1023899","https://discuss.rubyonrails.org/t/cve-2021-22880-possible-dos-vulnerability-in-active-record-postgresql-adapter/77129","https://github.com/rails/rails","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2021-22880.yml","https://groups.google.com/g/rubyonrails-security/c/ZzUqCh9vyhI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MO5OJ3F4ZL3UXVLJO6ECANRVZBNRS2IH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XQ3NS4IBYE2I3MVMGAHFZBZBIZGHXHT3","https://security.netapp.com/advisory/ntap-20210805-0009","https://www.debian.org/security/2021/dsa-4929"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-8hc4-xxm3-5ppp","url":"https://osv.dev/vulnerability/GHSA-8hc4-xxm3-5ppp"}],"summary":"Active Record subject to Regular Expression Denial-of-Service (ReDoS)"}