CVE-2024-26142

Summary

Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch

Severity

low

EPSS

1.5% (p71)

Also known as

GHSA-jjhx-jhvp-74wq, BIT-rails-2024-26142

Published

2024-02-27

References

• https://github.com/rails/rails/security/advisories/GHSA-jjhx-jhvp-74wq
• https://nvd.nist.gov/vuln/detail/CVE-2024-26142
• https://github.com/rails/rails/commit/b4d3bfb5ed8a5b5a90aad3a3b28860c7a931e272

Related advisories

• CVE-2022-23633 — high · RubyGems/actionpack
• CVE-2021-22904 — high · RubyGems/actionpack
• CVE-2021-22885 — high · RubyGems/actionpack
• CVE-2021-22902 — high · RubyGems/actionpack
• CVE-2020-8164 — high · RubyGems/actionpack
• CVE-2024-47887 — medium · RubyGems/actionpack
• CVE-2024-41128 — medium · RubyGems/actionpack
• CVE-2024-28103 — medium · RubyGems/actionpack

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity