Skip to content

Product

debian/ruby-fugit vulnerabilities

1 published CVE affecting debian/ruby-fugit, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest debian/ruby-fugit CVEs

Newest publication first

  1. CVE-2024-43380 fugit parse and parse_nat stall on lengthy input

    Published
    HighCVSS 7.5 EPSS 0.80% PoC

    fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the threa...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.