Inefficient Regular Expression Complexity
CVE-2021-41817
Summary
Date.parse in the date gem before 2.0.1, 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1 for Ruby allows ReDoS (regular expression Denial of Service) via a long string.
- LOW
- NETWORK
- NONE
- UNCHANGED
- NONE
- NONE
- NONE
- HIGH
CWE-1333 - Inefficient Regular Expression Complexity
The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.
Advisory Timeline
- Published
