-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| fugit | rubygems | < 1.11.1 | 1.11.1 |
RubyRubyMiggo AIRoot Cause AnalysisThe vulnerability documentation explicitly lists these six methods in workarounds and advisories. All affected functions handle input parsing without length validation, allowing attackers to submit arbitrarily long strings that trigger excessive processing. The commit diff shows test adjustments for parsing performance, confirming these methods' involvement. The CWE-400 classification directly maps to the uncontrolled resource consumption exhibited by these functions. File paths are inferred from standard Ruby gem structure and method namespaces (Fugit core vs Fugit::Nat module).
Ongoing coverage of React2Shell