{"action":"Upgrade resolv to 0.2.3 or later.","affected":[{"fixed":"0.2.3","introduced":"0"},{"fixed":"0.6.2","introduced":"0.4.0"},{"fixed":"0.3.1","introduced":"0.3.0"}],"component":"resolv","cve_ids":["CVE-2025-24294"],"ecosystem":"RubyGems","epss":0.00656,"exploited":false,"fixed_versions":["0.2.3","0.6.2","0.3.1"],"ghsa_id":"GHSA-xh69-987w-hrp8","id":"tcs_01M5KEP93YW9B7MKE4PHWAQZ4Z","modified_at":"2026-09-10T03:50:26.410248972Z","published_at":"2025-07-15T14:37:08Z","references":["https://osv.dev/vulnerability/GHSA-xh69-987w-hrp8","https://nvd.nist.gov/vuln/detail/CVE-2025-24294","https://github.com/ruby/resolv/commit/4c2f71b5e80826506f78417d85b38481c058fb25","https://github.com/ruby/resolv","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/resolv/CVE-2025-24294.yml","https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-xh69-987w-hrp8","url":"https://osv.dev/vulnerability/GHSA-xh69-987w-hrp8"}],"summary":"resolv vulnerable to DoS via insufficient DNS domain name length validation"}