/
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2023-28755

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-28755

CGA ID

CGA-2fhf-fhq2-xx66

Severity

5.3

Medium

CVSS V3

Description

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

References

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images