CVE-2023-22795

score

<0.1

cvss

7.5

epss

2.3%

published

2023-02-09

kev added

—

first seen

2026-10-21

Action Dispatch < 6.1.7.1 and < 7.0.4.1 contain a regular expression DoS caused by catastrophic backtracking in handling the If-None-Match header, letting attackers cause high CPU and memory usage, exploit requires crafted HTTP header and Ruby version below 3.2.0.