TI-2021-18444 CVE-2021-41819 · GHSA-4vf4-qmvg-mh7h
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names.
Priority LOW 39
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names.
RHSA-2022:5779
ruby:2.5 security update
Released 2022-08-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) ruby-2.5.9-110.module+el8.6.0+15956+aa803fc1.aarch64::ruby:2.5, ruby-2.5.9-110.module+el8.6.0+15956+aa803fc1.i686::ruby:2.5, ruby-2.5.9-110.module+el8.6.0+15956+aa803fc1.ppc64le::ruby:2.5 +47
Fixes 2 records
TI-2021-18443 CVE-2021-41817 · GHSA-qg54-694p-wgpp
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial…
Priority LOW 39
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string.