-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| globalid | rubygems | >= 0.2.1, < 1.0.1 | 1.0.1 |
Miggo AIRoot Cause AnalysisThe commit diff shows the removal of PATH_REGEXP and replacement of regex-based parsing with a simple string split operation in set_model_components. This directly addresses the ReDoS vulnerability by eliminating the inefficient regex. The CWE-1333 classification and advisory context confirm the root cause was regex complexity in model name parsing.
RubyRuby