{"action":"Upgrade actionpack to 6.1.7.1 or later.","affected":[{"fixed":"6.1.7.1","introduced":"4.0.0.beta1"},{"fixed":"7.0.4.1","introduced":"7.0.0"}],"component":"actionpack","cve_ids":["CVE-2023-22795"],"ecosystem":"RubyGems","epss":0.02278,"exploited":false,"fixed_versions":["6.1.7.1","7.0.4.1"],"ghsa_id":"GHSA-8xww-x3g3-6jcv","id":"tcs_01M5KEJ5KK2G5FVYNBTMENG7JR","modified_at":"2025-03-31T13:41:44.379427Z","published_at":"2023-01-18T18:20:51Z","references":["https://osv.dev/vulnerability/GHSA-8xww-x3g3-6jcv","https://nvd.nist.gov/vuln/detail/CVE-2023-22795","https://github.com/rails/rails/commit/8d82687f3b04b2803320b64f985308239a8c3d2f","https://github.com/rails/rails/commit/8dc45950619a4c64d16fb9370570c996d201f9b0","https://github.com/rails/rails/commit/cd461c3e64e09cdcb1e379d1c35423c5e2caa592","https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118","https://github.com/rails/rails","https://github.com/rails/rails/releases/tag/v6.1.7.1","https://github.com/rails/rails/releases/tag/v7.0.4.1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-22795.yml","https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-8xww-x3g3-6jcv","url":"https://osv.dev/vulnerability/GHSA-8xww-x3g3-6jcv"}],"summary":"ReDoS based DoS vulnerability in Action Dispatch"}