{"affected":[{"defaultStatus":"unaffected","ecosystem":"gem","packageName":"encoded_id-rails","product":"","source":"CNA: VulnCheck","vendor":"","versions":[{"lessThan":"1.0.0.beta2","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","ecosystem":"RubyGems","packageName":"encoded_id-rails","product":"encoded_id-rails","source":"OSV GHSA-3px7-jm2p-6h2c","vendor":"","versions":[{"status":"affected","version":"0.1.0","versionType":"RubyGems"},{"status":"affected","version":"0.2.0","versionType":"RubyGems"},{"status":"affected","version":"0.3.0","versionType":"RubyGems"},{"status":"affected","version":"0.3.1","versionType":"RubyGems"},{"status":"affected","version":"0.4.0","versionType":"RubyGems"},{"status":"affected","version":"0.5.0","versionType":"RubyGems"},{"status":"affected","version":"0.6.0","versionType":"RubyGems"},{"status":"affected","version":"0.6.1","versionType":"RubyGems"},{"status":"affected","version":"0.6.2","versionType":"RubyGems"},{"status":"affected","version":"1.0.0.beta1","versionType":"RubyGems"},{"events":[{"introduced":"0"},{"fixed":"1.0.0.beta2"}],"status":"unknown","version":"0","versionType":"ECOSYSTEM"}]}],"cveId":"CVE-2024-0241","cwes":["CWE-400"],"description":"encoded_id-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an extremely long \"id\" parameter.","epss":{"date":"2026-11-08","percentile":0.66188,"score":0.01112},"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1794146388800,"publishedAt":1704401280606,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/stevegeek/encoded_id-rails/security/advisories/GHSA-3px7-jm2p-6h2c"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91"},{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/advisories/GHSA-3px7-jm2p-6h2c"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-3px7-jm2p-6h2c"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://github.com/stevegeek/encoded_id-rails/security/advisories/GHSA-3px7-jm2p-6h2c"},{"source":"ADP: CVE","tags":["patch","x_transferred"],"url":"https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://github.com/advisories/GHSA-3px7-jm2p-6h2c"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-3px7-jm2p-6h2c"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-3px7-jm2p-6h2c"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-3px7-jm2p-6h2c"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91"},{"kind":"fix","source":"ADP: CVE","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91"},{"kind":"fix","source":"OSV GHSA-3px7-jm2p-6h2c","text":"encoded_id-rails (RubyGems): OSV reports a fixed version 1.0.0.beta2. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-3px7-jm2p-6h2c"}],"revision":"d28e03f8659990e9a045e5e071d888da97392facf34adea18ad28d0182a8ff56","sources":[{"modifiedAt":1794146388800,"name":"CNA: VulnCheck","retrievedAt":1794146913497,"url":"https://www.cve.org/CVERecord?id=CVE-2024-0241"},{"modifiedAt":1783493577406,"name":"OSV / GitHub Security Advisories","retrievedAt":1794146913907,"url":"https://osv.dev/vulnerability/GHSA-3px7-jm2p-6h2c"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794150528542,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-0241"}],"ssvc":{"assessedAt":1704487506578,"automatable":"yes","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"encoded_id-rails Denial of Service Vulnerability","updatedAt":1794150528542}