🎯 New Report #2814774: Possible DoS in NumberHelpers
🔺Severity: Medium
👽 Reporter: manun
⭐️ Reputation: 209
🛠 State: resolved
💼 Team: Ruby on Rails
💵 Bounty: null
🕐 Submitted: 2024-10-31
⏰ Disclosed: 2026-10-06 18:43:32
📝 Summary: A denial of service vulnerability was discovered in Active Support's number helpers. The vulnerability allowed strings in scientific notation to be accepted and processed, which could cause excessive memory consumption or CPU exhaustion. The issue was addressed in patched versions where number helpers now treat strings containing scientific notation characters as non-numeric input and return them unchanged.
📂 Report JSON File: 2814774
@hackeronereports