{"action":"Upgrade solidus_core to 2.11.13 or later.","affected":[{"fixed":"2.11.13","introduced":"0"},{"fixed":"3.0.4","introduced":"3.0.0"},{"fixed":"3.1.4","introduced":"3.1.0"}],"component":"solidus_core","cve_ids":["CVE-2021-43805"],"ecosystem":"RubyGems","epss":0.01449,"exploited":false,"fixed_versions":["2.11.13","3.0.4","3.1.4"],"ghsa_id":"GHSA-qxmr-qxh6-2cc9","id":"tcs_01M5KEN451VNQAMFM2V9A2W53P","modified_at":"2026-07-08T06:28:36.700655909Z","published_at":"2021-12-07T22:01:47Z","references":["https://osv.dev/vulnerability/GHSA-qxmr-qxh6-2cc9","https://github.com/solidusio/solidus/security/advisories/GHSA-qxmr-qxh6-2cc9","https://nvd.nist.gov/vuln/detail/CVE-2021-43805","https://github.com/solidusio/solidus/commit/6be174c955fad84017ca67589c676526bc5ade71","https://github.com/solidusio/solidus/commit/9867153e01e3c3b898cdbcedd7b43375ea922401","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/solidus_core/CVE-2021-43805.yml","https://github.com/solidusio/solidus"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qxmr-qxh6-2cc9","url":"https://osv.dev/vulnerability/GHSA-qxmr-qxh6-2cc9"}],"summary":"ReDos vulnerability on guest checkout email validation"}