{"action":"Upgrade rails to 2:6.1.7.3+dfsg-1 or later.","affected":[{"fixed":"2:6.1.7.3+dfsg-1","introduced":"0"}],"component":"rails","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2:6.1.7.3+dfsg-1"],"id":"tcs_01M5NHWFFFYZ50GCCACRS3EKR5","modified_at":"2026-10-25T09:47:36.520975596Z","published_at":"2023-02-09T20:15:11.487Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-22796","https://security-tracker.debian.org/tracker/CVE-2023-22796"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-22796","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-22796"}],"summary":"A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a stat"}