Threats tagged 'ghsa-63cq-cj6g-qfr2'

CVE-2024-27282 is a vulnerability in Ruby versions 3.0.0 through 3.3.0 where attacker-supplied data to the Ruby regex compiler can lead to arbitrary heap data disclosure. This includes sensitive information such as pointers and strings. The issue is fixed in Ruby versions 3.0.7, 3.1.5, 3.2.4, and 3.3.1.