Threats tagged 'ghsa-5m38-526f-3498'

CVE-2026-67987 is a high-severity vulnerability affecting the crmne/ruby_llm project at a specific commit. It involves polynomial-time regular expression denial-of-service (ReDoS) conditions in the think-tag response parsing on Ruby 3.1.x. Malicious or anomalous model responses with many unterminated <think> tags can cause excessive CPU consumption and delay chat-completion processing.