CVE-2023-22799Patch(rubyonrails / globalid)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch rubyonrails globalid systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. All users running an affected release should either upgrade or use one of the workarounds immediately.

rubyonrails CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Weakness type (CWE)

CWE-400CWE-1333

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

globalid

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

rubyonrails

Products

globalid

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://tinyurl.com/2e3f2k7y

Full discourse1 post

Ferramentas Linux@Cezar_H_Linux206d
Patch
Heads up, #openSUSE community! A new security advisory (openSUSE-SU-2026:10347-1) is out for Tumbleweed addressing CVE-2023-22799 in the GlobalID gem (ruby4.0-rubygem-globalid). Read more: 👉 https://tinyurl.com/2e3f2k7y #Security https://t.co/CjZe4gmJkm
Post summary
An openSUSE security advisory (openSUSE‑SU‑2026:10347‑1) has been released for Tumbleweed, addressing CVE‑2023‑22799 in the GlobalID gem, indicating a patch or remediation is available.
0001096
1.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	rubyonrails	globalid	-	ruby	-

Explore more

Back to dashboard rubyonrails CVEs globalid vulnerabilities