diff --git a/advisories/github-reviewed/2022/05/GHSA-34hf-g744-jw64/GHSA-34hf-g744-jw64.json b/advisories/github-reviewed/2022/05/GHSA-34hf-g744-jw64/GHSA-34hf-g744-jw64.json index 25e0f28fde5..bdcbfacaa7a 100644 --- a/advisories/github-reviewed/2022/05/GHSA-34hf-g744-jw64/GHSA-34hf-g744-jw64.json +++ b/advisories/github-reviewed/2022/05/GHSA-34hf-g744-jw64/GHSA-34hf-g744-jw64.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-34hf-g744-jw64", - "modified": "2022-06-17T21:39:16Z", + "modified": "2023-07-03T21:49:57Z", "published": "2022-05-14T01:48:52Z", "aliases": [ "CVE-2014-10077" ], - "summary": "Denial of service attack in i18n", + "summary": "i18n Vulnerable to Denial of Service Attack", "details": "Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash.", "severity": [ { @@ -40,6 +40,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-10077" }, + { + "type": "WEB", + "url": "https://github.com/ruby-i18n/i18n/pull/250/commits/08293a41b34e93824563ca0f5b9b97e7451b6387" + }, { "type": "WEB", "url": "https://github.com/rubysec/ruby-advisory-db/pull/182/files"