{"action":"Upgrade actionpack to 5.2.8.15 or later.","affected":[{"fixed":"5.2.8.15","introduced":"3.0.0"},{"fixed":"6.1.7.1","introduced":"6.0.0"},{"fixed":"7.0.4.1","introduced":"7.0.0"}],"component":"actionpack","cve_ids":["CVE-2023-22792"],"ecosystem":"RubyGems","epss":0.01695,"exploited":false,"fixed_versions":["5.2.8.15","6.1.7.1","7.0.4.1"],"ghsa_id":"GHSA-p84v-45xj-wwqj","id":"tcs_01M5KEMH6BXYQ6F62MATDNM3SW","modified_at":"2025-02-18T22:46:55.546277Z","published_at":"2023-01-18T18:23:34Z","references":["https://osv.dev/vulnerability/GHSA-p84v-45xj-wwqj","https://nvd.nist.gov/vuln/detail/CVE-2023-22792","https://discuss.rubyonrails.org/t/cve-2023-22792-possible-redos-based-dos-vulnerability-in-action-dispatch/82115","https://github.com/rails/rails","https://github.com/rails/rails/releases/tag/v7.0.4.1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-22792.yml","https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released","https://security.netapp.com/advisory/ntap-20240202-0007","https://www.debian.org/security/2023/dsa-5372"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-p84v-45xj-wwqj","url":"https://osv.dev/vulnerability/GHSA-p84v-45xj-wwqj"}],"summary":"ReDoS based DoS vulnerability in Action Dispatch"}