Search for packages
Package details: pkg:gem/time@0.2.1
purl pkg:gem/time@0.2.1
Next non-vulnerable version 0.2.2
Latest non-vulnerable version 0.2.2
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-q5ek-4e1r-eyeb
Aliases:
CVE-2023-28756
GHSA-fg7x-g82r-94qc
A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.
0.2.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-03T18:41:43.385056+00:00 GitLab Importer Affected by VCID-q5ek-4e1r-eyeb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/time/CVE-2023-28756.yml 37.0.0
2025-07-01T18:14:03.367941+00:00 GitLab Importer Affected by VCID-q5ek-4e1r-eyeb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/time/CVE-2023-28756.yml 36.1.3