CVE-2021-41817

Regular expression denial of service vulnerability (ReDoS) in date in gem/date

Identifiers

CVE-2021-41817, GHSA-qg54-694p-wgpp

Package Slug

gem/date

Vulnerability

Regular expression denial of service vulnerability (ReDoS) in date

Description

Date includes a ReDoS vulnerability.

Affected Versions

All versions before 2.0.1, all versions starting from 3.0.0 before 3.0.2, all versions starting from 3.1.0 before 3.1.2, version 3.2.0

Solution

Upgrade to versions 2.0.1, 3.0.2, 3.1.2, 3.2.1 or above.

Last Modified

2022-01-11

source