CVE-2021-22904

score

<0.1

cvss

7.5

epss

4.9%

published

2021-06-11

kev added

—

first seen

2026-10-21

Actionpack Ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 contains a denial of service caused by a too permissive regular expression in Token Authentication logic in Action Controller, letting attackers cause denial of service, exploit requires using authenticate_or_request_with_http_token or authenticate_with_http_token.