{"action":"Upgrade activesupport to 6.1.7.1 or later.","affected":[{"fixed":"6.1.7.1","introduced":"0"},{"fixed":"7.0.4.1","introduced":"7.0.0"}],"component":"activesupport","cve_ids":["CVE-2023-22796"],"ecosystem":"RubyGems","epss":0.01712,"exploited":false,"fixed_versions":["6.1.7.1","7.0.4.1"],"ghsa_id":"GHSA-j6gc-792m-qgm2","id":"tcs_01M5KEKSZ6JP43S63C3R2PQY2H","modified_at":"2025-02-18T22:49:00.916055Z","published_at":"2023-01-18T18:23:20Z","references":["https://osv.dev/vulnerability/GHSA-j6gc-792m-qgm2","https://nvd.nist.gov/vuln/detail/CVE-2023-22796","https://github.com/rails/rails/commit/2164d4f6a1bde74b911fe9ba3c8df1b5bf345bf8","https://github.com/rails/rails/commit/a7cda7e6aa5334ab41b1f4b0f671be931be946ef","https://discuss.rubyonrails.org/t/cve-2023-22796-possible-redos-based-dos-vulnerability-in-active-supports-underscore/82116","https://github.com/rails/rails","https://github.com/rails/rails/releases/tag/v6.1.7.1","https://github.com/rails/rails/releases/tag/v7.0.4.1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activesupport/CVE-2023-22796.yml","https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-j6gc-792m-qgm2","url":"https://osv.dev/vulnerability/GHSA-j6gc-792m-qgm2"}],"summary":"ReDoS based DoS vulnerability in Active Support's underscore"}