{"action":"Upgrade date to 2.0.1 or later.","affected":[{"fixed":"3.2.1","introduced":"3.2.0"},{"fixed":"3.1.2","introduced":"3.1.0"},{"fixed":"3.0.2","introduced":"3.0.0"},{"fixed":"2.0.1","introduced":"0"}],"component":"date","cve_ids":["CVE-2021-41817"],"ecosystem":"RubyGems","epss":0.03463,"exploited":false,"fixed_versions":["3.2.1","3.1.2","3.0.2","2.0.1"],"ghsa_id":"GHSA-qg54-694p-wgpp","id":"tcs_01M5KEMYSFSJ8ZBPZ4BHM7NK17","modified_at":"2025-01-27T08:58:37.294539Z","published_at":"2021-11-16T00:32:30Z","references":["https://osv.dev/vulnerability/GHSA-qg54-694p-wgpp","https://nvd.nist.gov/vuln/detail/CVE-2021-41817","https://github.com/ruby/date/commit/3959accef8da5c128f8a8e2fd54e932a4fb253b0","https://hackerone.com/reports/1254844","https://github.com/ruby/date","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/date/CVE-2021-41817.yml","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF","https://security.gentoo.org/glsa/202401-27","https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qg54-694p-wgpp","url":"https://osv.dev/vulnerability/GHSA-qg54-694p-wgpp"}],"summary":"Regular expression denial of service vulnerability (ReDoS) in date"}