CVE-2021-41817

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string

published January 1, 2022

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03222 · 88.1th percentile
Published
2022-01-01T00:00Z
EPSS history
Timeline
  • 01 JAN 00:00Z
    Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string
    cvelistv5