HTTP::Headers::ActionPack before 0.10 can exhaust CPU (CVE-2026-113877)
Accept-Language ranges are matched as regular expressions, which can burn CPU on crafted input.
1 stories, newest first · one card per story
Accept-Language ranges are matched as regular expressions, which can burn CPU on crafted input.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views