[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2012-5371":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T14:55:33.319Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":19,"duplicate_of":9,"upstream":20,"downstream":21,"duplicates":32,"related":35,"reserved_at":9,"published_at":36,"modified_at":37,"state":38,"summary":39,"references_raw":48,"kevs":110,"epss":111,"epss_history":114,"metrics":373,"affected":378},"CVE-2012-5371","Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against a variant of the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4815.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"CWE-310","Cryptographic Issues","Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","category","Draft",[],[],[],[],[22,24,26,28,30],{"_key":23},"DLA-263-1",{"_key":25},"RHSA-2013:0582",{"_key":27},"RHSA-2026:7305",{"_key":29},"RHSA-2026:7307",{"_key":31},"RHSA-2026:8838",[33],{"_key":34},"CVE-2011-5371",[],"2012-11-28T11:00:00.000Z","2024-08-06T21:05:47.293Z","Modified",{"cisa_kev":40,"cisa_ransomware":40,"cisa_vendor":9,"epss_severity":41,"epss_score":42,"severity":43,"severity_score":44,"severity_version":45,"severity_source":46,"severity_vector":47,"severity_status":38},false,"low",0.0194,"medium",5,"v2.0","nvd","AV:N/AC:L/Au:N/C:N/I:N/A:P",[49,55,62,67,72,76,82,86,90,96,100,105],{"url":50,"sources":51,"tags":53},"http://asfws12.files.wordpress.com/2012/11/asfws2012-jean_philippe_aumasson-martin_bosslet-hash_flooding_dos_reloaded.pdf",[52,46],"cve.org",[54],"X Refsource MISC",{"url":56,"sources":57,"tags":58},"http://securitytracker.com/id?1027747",[52,46],[59,60,61],"VDB Entry","X Refsource SECTRACK","Patch",{"url":63,"sources":64,"tags":65},"http://www.osvdb.org/87280",[52,46],[59,66],"X Refsource OSVDB",{"url":68,"sources":69,"tags":70},"http://www.securityfocus.com/bid/56484",[52,46],[59,71],"X Refsource BID",{"url":73,"sources":74,"tags":75},"https://www.131002.net/data/talks/appsec12_slides.pdf",[52,46],[54],{"url":77,"sources":78,"tags":79},"http://www.ruby-lang.org/en/news/2012/11/09/ruby19-hashdos-cve-2012-5371/",[52,46],[80,61,81],"X Refsource CONFIRM","Vendor Advisory",{"url":83,"sources":84,"tags":85},"http://2012.appsec-forum.ch/conferences/#c17",[52,46],[54],{"url":87,"sources":88,"tags":89},"https://bugzilla.redhat.com/show_bug.cgi?id=875236",[52,46],[80,61],{"url":91,"sources":92,"tags":93},"http://secunia.com/advisories/51253",[52,46],[94,95],"Third Party Advisory","X Refsource SECUNIA",{"url":97,"sources":98,"tags":99},"http://www.ocert.org/advisories/ocert-2012-001.html",[52,46],[54],{"url":101,"sources":102,"tags":103},"http://www.ubuntu.com/usn/USN-1733-1",[52,46],[81,104],"X Refsource UBUNTU",{"url":106,"sources":107,"tags":108},"https://exchange.xforce.ibmcloud.com/vulnerabilities/79993",[52,46],[59,109],"X Refsource XF",[],{"date":112,"score":42,"percentile":113},"2026-06-04",0.83756,[115,119,122,125,128,131,134,136,138,141,144,147,149,152,155,158,161,164,167,169,172,175,177,179,181,184,187,191,194,197,200,202,205,208,211,213,216,219,222,225,228,231,234,237,240,243,246,249,252,254,257,260,263,266,270,273,276,279,282,285,288,291,294,296,299,301,304,306,309,312,314,317,320,322,325,328,331,334,337,340,343,346,349,352,355,358,361,364,367,370],{"date":116,"score":117,"percentile":118},"2025-11-04",0.02922,0.85884,{"date":120,"score":117,"percentile":121},"2025-11-05",0.85888,{"date":123,"score":117,"percentile":124},"2025-11-06",0.85891,{"date":126,"score":117,"percentile":127},"2025-11-07",0.85901,{"date":129,"score":117,"percentile":130},"2025-11-08",0.85903,{"date":132,"score":117,"percentile":133},"2025-11-09",0.85898,{"date":135,"score":117,"percentile":133},"2025-11-10",{"date":137,"score":117,"percentile":127},"2025-11-11",{"date":139,"score":117,"percentile":140},"2025-11-12",0.85913,{"date":142,"score":117,"percentile":143},"2025-11-13",0.85919,{"date":145,"score":117,"percentile":146},"2025-11-14",0.85921,{"date":148,"score":117,"percentile":140},"2025-11-15",{"date":150,"score":117,"percentile":151},"2025-11-16",0.85911,{"date":153,"score":117,"percentile":154},"2025-11-17",0.85896,{"date":156,"score":117,"percentile":157},"2025-11-18",0.8515,{"date":159,"score":117,"percentile":160},"2025-11-19",0.85151,{"date":162,"score":117,"percentile":163},"2025-11-20",0.85154,{"date":165,"score":117,"percentile":166},"2025-11-21",0.85907,{"date":168,"score":117,"percentile":127},"2025-11-22",{"date":170,"score":117,"percentile":171},"2025-11-23",0.85895,{"date":173,"score":117,"percentile":174},"2025-11-24",0.85897,{"date":176,"score":117,"percentile":154},"2025-11-25",{"date":178,"score":117,"percentile":174},"2025-11-26",{"date":180,"score":117,"percentile":174},"2025-11-27",{"date":182,"score":117,"percentile":183},"2025-11-28",0.85875,{"date":185,"score":117,"percentile":186},"2025-11-29",0.85945,{"date":188,"score":189,"percentile":190},"2025-11-30",0.0281,0.85643,{"date":192,"score":189,"percentile":193},"2025-12-01",0.857,{"date":195,"score":189,"percentile":196},"2025-12-02",0.85702,{"date":198,"score":189,"percentile":199},"2025-12-03",0.85703,{"date":201,"score":189,"percentile":190},"2025-12-04",{"date":203,"score":189,"percentile":204},"2025-12-05",0.85647,{"date":206,"score":189,"percentile":207},"2025-12-06",0.85642,{"date":209,"score":189,"percentile":210},"2025-12-07",0.8563,{"date":212,"score":189,"percentile":210},"2025-12-08",{"date":214,"score":189,"percentile":215},"2025-12-09",0.85641,{"date":217,"score":189,"percentile":218},"2025-12-10",0.85662,{"date":220,"score":189,"percentile":221},"2025-12-11",0.85667,{"date":223,"score":189,"percentile":224},"2025-12-12",0.85669,{"date":226,"score":189,"percentile":227},"2025-12-13",0.85664,{"date":229,"score":189,"percentile":230},"2025-12-14",0.85658,{"date":232,"score":189,"percentile":233},"2025-12-15",0.85653,{"date":235,"score":189,"percentile":236},"2025-12-16",0.85659,{"date":238,"score":189,"percentile":239},"2025-12-17",0.85665,{"date":241,"score":189,"percentile":242},"2025-12-18",0.85671,{"date":244,"score":189,"percentile":245},"2025-12-19",0.85676,{"date":247,"score":189,"percentile":248},"2025-12-20",0.85673,{"date":250,"score":189,"percentile":251},"2025-12-21",0.85674,{"date":253,"score":189,"percentile":248},"2025-12-22",{"date":255,"score":189,"percentile":256},"2025-12-23",0.85678,{"date":258,"score":189,"percentile":259},"2025-12-24",0.85683,{"date":261,"score":189,"percentile":262},"2025-12-25",0.85698,{"date":264,"score":189,"percentile":265},"2025-12-26",0.85699,{"date":267,"score":268,"percentile":269},"2025-12-27",0.02443,0.84818,{"date":271,"score":189,"percentile":272},"2025-12-28",0.85692,{"date":274,"score":189,"percentile":275},"2025-12-29",0.85689,{"date":277,"score":189,"percentile":278},"2025-12-30",0.85695,{"date":280,"score":189,"percentile":281},"2025-12-31",0.85704,{"date":283,"score":189,"percentile":284},"2026-01-01",0.85762,{"date":286,"score":189,"percentile":287},"2026-01-02",0.85765,{"date":289,"score":189,"percentile":290},"2026-01-03",0.85763,{"date":292,"score":189,"percentile":293},"2026-01-04",0.85706,{"date":295,"score":189,"percentile":196},"2026-01-05",{"date":297,"score":189,"percentile":298},"2026-01-06",0.85705,{"date":300,"score":189,"percentile":298},"2026-01-07",{"date":302,"score":189,"percentile":303},"2026-01-08",0.85715,{"date":305,"score":189,"percentile":303},"2026-01-09",{"date":307,"score":189,"percentile":308},"2026-01-10",0.85711,{"date":310,"score":189,"percentile":311},"2026-01-11",0.85707,{"date":313,"score":189,"percentile":196},"2026-01-12",{"date":315,"score":189,"percentile":316},"2026-01-13",0.85697,{"date":318,"score":189,"percentile":319},"2026-01-14",0.85712,{"date":321,"score":189,"percentile":319},"2026-01-15",{"date":323,"score":189,"percentile":324},"2026-01-16",0.85719,{"date":326,"score":189,"percentile":327},"2026-01-17",0.85723,{"date":329,"score":189,"percentile":330},"2026-01-18",0.85721,{"date":332,"score":189,"percentile":333},"2026-01-19",0.85718,{"date":335,"score":189,"percentile":336},"2026-01-20",0.8572,{"date":338,"score":189,"percentile":339},"2026-01-21",0.85725,{"date":341,"score":189,"percentile":342},"2026-01-22",0.8573,{"date":344,"score":189,"percentile":345},"2026-01-23",0.85742,{"date":347,"score":189,"percentile":348},"2026-01-24",0.85751,{"date":350,"score":189,"percentile":351},"2026-01-25",0.85746,{"date":353,"score":189,"percentile":354},"2026-01-26",0.85744,{"date":356,"score":189,"percentile":357},"2026-01-27",0.85749,{"date":359,"score":189,"percentile":360},"2026-01-28",0.85754,{"date":362,"score":189,"percentile":363},"2026-01-29",0.85757,{"date":365,"score":189,"percentile":366},"2026-01-30",0.85758,{"date":368,"score":189,"percentile":369},"2026-01-31",0.85761,{"date":371,"score":189,"percentile":372},"2026-02-01",0.85824,[374],{"source":46,"cvss_v2_0":375,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":44,"baseSeverity":9,"vectorString":47,"impactScore":376,"exploitabilityScore":377},2.9,10,[379],{"ecosystem":9,"name":380,"vendor":381,"product":380,"cpe_part":382,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":383},"ruby","ruby-lang","a",[384,390,392,394,396,397,399,401,403],{"version":385,"is_range":386,"range_type":387,"version_start":9,"version_start_type":9,"version_end":388,"version_end_type":389,"fixed_in":9},"lte1.9.3",true,"cpe","1.9.3","including",{"version":391,"is_range":40,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.9",{"version":393,"is_range":40,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.9.1",{"version":395,"is_range":40,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.9.2",{"version":388,"is_range":40,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":398,"is_range":40,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.9.3:p0",{"version":400,"is_range":40,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.9.3:p125",{"version":402,"is_range":40,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.9.3:p194",{"version":404,"is_range":40,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.0"]