Activesupport Project vulnerabilities
We track 1 vulnerability in Activesupport Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 9, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Activesupport Project vulnerabilities
- 7.5 High severity
https://github.com/rails/rails: Inefficient Regular Expression Complexity
A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process t