Is solidus_core affected by CVE-2021-43805?

RubyGems solidus_core is affected in =3.0.0 =3.1.0 <3.1.4.

Is CVE-2021-43805 being exploited?

Not on the CISA KEV list. EPSS exploit probability is 1.4%.

high

CVE-2021-43805

Q: Is CVE-2021-43805 being exploited?

Not on the CISA KEV list. EPSS exploit probability is 1.4%.

RubyGems · solidus_core

Summary

ReDos vulnerability on guest checkout email validation

Severity: high
EPSS: 1.4% (p69)
Also known as: GHSA-qxmr-qxh6-2cc9
Published: 2021-12-07

References

https://github.com/solidusio/solidus/security/advisories/GHSA-qxmr-qxh6-2cc9
https://nvd.nist.gov/vuln/detail/CVE-2021-43805
https://github.com/solidusio/solidus/commit/6be174c955fad84017ca67589c676526bc5ade71

Related advisories

GHSA-5629-8855-gf4g — critical · RubyGems/solidus_core

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Check my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.