{"action":"Upgrade time to 0.1.1 or later.","affected":[{"fixed":"0.2.2","introduced":"0.2.0"},{"fixed":"0.1.1","introduced":"0"}],"component":"time","cve_ids":["CVE-2023-28756"],"ecosystem":"RubyGems","epss":0.02452,"exploited":false,"fixed_versions":["0.2.2","0.1.1"],"ghsa_id":"GHSA-fg7x-g82r-94qc","id":"tcs_01M5KEK17Z6F91QPT9KZE7MHH8","modified_at":"2026-09-10T03:50:08.256309353Z","published_at":"2023-03-31T06:30:15Z","references":["https://osv.dev/vulnerability/GHSA-fg7x-g82r-94qc","https://nvd.nist.gov/vuln/detail/CVE-2023-28756","https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756","https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released","https://www.ruby-lang.org/en/downloads/releases","https://security.netapp.com/advisory/ntap-20230526-0004","https://security.gentoo.org/glsa/202401-27","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FFZANOQA4RYX7XCB42OO3P24DQKWHEKA","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFZANOQA4RYX7XCB42OO3P24DQKWHEKA","https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html","https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/time/CVE-2023-28756.yml","https://github.com/ruby/time/releases","https://github.com/ruby/time"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fg7x-g82r-94qc","url":"https://osv.dev/vulnerability/GHSA-fg7x-g82r-94qc"}],"summary":"Ruby Time component ReDoS issue"}