{"action":"Upgrade actionpack to 7.1.3.1 or later.","affected":[{"fixed":"7.1.3.1","introduced":"7.1.0"}],"component":"actionpack","cve_ids":["CVE-2024-26142"],"ecosystem":"RubyGems","epss":0.01498,"exploited":false,"fixed_versions":["7.1.3.1"],"ghsa_id":"GHSA-jjhx-jhvp-74wq","id":"tcs_01M5KEKY18S26QSKWHXQ3DRPJS","modified_at":"2026-09-10T03:50:06.210253018Z","published_at":"2024-02-27T21:41:09Z","references":["https://osv.dev/vulnerability/GHSA-jjhx-jhvp-74wq","https://github.com/rails/rails/security/advisories/GHSA-jjhx-jhvp-74wq","https://nvd.nist.gov/vuln/detail/CVE-2024-26142","https://github.com/rails/rails/commit/b4d3bfb5ed8a5b5a90aad3a3b28860c7a931e272","https://discuss.rubyonrails.org/t/possible-redos-vulnerability-in-accept-header-parsing-in-action-dispatch/84946","https://github.com/rails/rails","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26142.yml"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-jjhx-jhvp-74wq","url":"https://osv.dev/vulnerability/GHSA-jjhx-jhvp-74wq"}],"summary":"Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch"}