{"action":"Upgrade uri to 0.10.0.1 or later.","affected":[{"fixed":"0.12.1","introduced":"0.12.0"},{"fixed":"0.11.1","introduced":"0.11.0"},{"fixed":"0.10.2","introduced":"0.10.1"},{"fixed":"0.10.0.1","introduced":"0"}],"component":"uri","cve_ids":["CVE-2023-28755"],"ecosystem":"RubyGems","epss":0.02637,"exploited":false,"fixed_versions":["0.12.1","0.11.1","0.10.2","0.10.0.1"],"ghsa_id":"GHSA-hv5j-3h9f-99c2","id":"tcs_01M5KEKPS8EPET6F3FE48ZTSAF","modified_at":"2026-09-10T03:49:53.056577915Z","published_at":"2023-03-31T06:30:15Z","references":["https://osv.dev/vulnerability/GHSA-hv5j-3h9f-99c2","https://nvd.nist.gov/vuln/detail/CVE-2023-28755","https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755","https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released","https://www.ruby-lang.org/en/downloads/releases","https://security.netapp.com/advisory/ntap-20230526-0003","https://security.gentoo.org/glsa/202401-27","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FFZANOQA4RYX7XCB42OO3P24DQKWHEKA","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QA6XUKUY7B5OLNQBLHOT43UW7C5NIOQQ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFZANOQA4RYX7XCB42OO3P24DQKWHEKA","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF","https://lists.debian.org/debian-lts-announce/2025/05/msg00015.html","https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html","https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2023-28755.yml","https://github.com/ruby/uri/releases","https://github.com/ruby/uri"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hv5j-3h9f-99c2","url":"https://osv.dev/vulnerability/GHSA-hv5j-3h9f-99c2"}],"summary":"Ruby URI component ReDoS issue"}