Mmastodon TechnologyCybersecurity first seen 5 h ago, last 5 h ago, peak #9

encoded_id-rails vulnerability allows remote denial of service attacks

Original: 🚨 EUVD-2023-2632 📊 Score: 7.5/10 (CVSS v3.1) 📅 Published: 2024-01-04 | Updated: 2026-10-01 📝 encoded_id-rails versions b

A security advisory tracked as EUVD-2023-2632 warns that encoded_id-rails versions before 1.0.0.beta2 contain an uncontrolled resource consumption flaw. A remote, unauthenticated attacker could exploit it to trigger a denial of service. The vulnerability carries a CVSS v3.1 score of 7.5 and was published on 4 January 2024, with the advisory most recently updated on 1 October 2026.

Why now: Security teams are monitoring the newly updated advisory for a medium-high severity flaw in a widely used Rails library.

encoded_id-railsEUVD-2023-2632CVSS

Open on mastodon →

Evidence

• 🚨 EUVD-2023-2632 📊 Score: 7.5/10 (CVSS v3.1) 📅 Published: 2024-01-04 | Updated: 2026-10-01 📝 encoded_id-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/649576