Approved changes feed: RSS · Atom

cpe:2.3:a:rubyonrails:globalid:*:*:*:*:*:ruby:*:*

part: a version: * update: *

VendorRubyonrails (a0962337-0e2d-518c-b84b-f2864721d062)
ProductGlobalid (d95a9620-05c6-51fc-9607-b0711fed92f5)
Edition*
Language*
Software edition*
Target softwareruby
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ruby-globalid purl2cpe 2026-06-01 10:11:28.048746
pkg:deb/ubuntu/ruby-globalid purl2cpe 2026-06-01 10:11:28.048747
pkg:gem/globalid purl2cpe 2026-06-01 10:11:28.048749
pkg:github/rails/globalid purl2cpe 2026-06-01 10:11:28.048750
pkg:rpm/fedora/rubygem-globalid purl2cpe 2026-06-01 10:11:28.048752
pkg:rpm/opensuse/rubygem-globalid purl2cpe 2026-06-01 10:11:28.048753

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22799 vulnerable 2026-06-03 14:49:20.230246 Details available
A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. All users running an affected release should either upgrade or use one of the workarounds immediately.
Published: 2023-02-09T00:00:00.000Z
Updated: 2024-08-02T10:20:30.834Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.