CVE-2021-22902

score

<0.1

cvss

7.5

epss

2.9%

published

2021-06-11

kev added

—

first seen

2026-10-21

Actionpack Ruby gem before 6.0.3.7 and 6.1.3.2 contains a denial of service caused by catastrophic backtracking in the Mime type parser of Action Dispatch, letting attackers cause service disruption, exploit requires crafted Accept headers.