[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-44572":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":94,"aliases":95,"duplicate_of":9,"upstream":96,"downstream":97,"duplicates":136,"related":137,"reserved_at":9,"published_at":150,"modified_at":151,"state":152,"summary":153,"references_raw":162,"kevs":179,"epss":180,"epss_history":183,"metrics":455,"affected":461},"CVE-2022-44572","A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an attacker tocraft input that can cause RFC2183 multipart boundary parsing in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that parse multipart posts using Rack (virtually all Rails applications) are impacted.",null,[11,24],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-1333","Inefficient Regular Expression Complexity","The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.","weakness","Draft","Base","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-492","Regular Expression Exponential Blowup",[],{"_key":25,"id":25,"name":26,"description":27,"type":15,"status":16,"abstraction":28,"likelihood_of_exploit":18,"capec":29},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","Class",[30,34,92],{"id":31,"name":32,"techniques":33},"CAPEC-147","XML Ping of the Death",[],{"id":35,"name":36,"techniques":37},"CAPEC-227","Sustained Client Engagement",[38],{"id":39,"name":40,"tactics":41,"countermeasures":45},"T1499","Endpoint Denial of Service",[42],{"id":43,"name":44},"TA0105","Impact",[46,51,55,59,63,67,71,75,79,83,88],{"id":47,"name":48,"tactic":49},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":50},"Detect",{"id":52,"name":53,"tactic":54},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":50},{"id":56,"name":57,"tactic":58},"D3-CSPP","Client-server Payload Profiling",{"name":50},{"id":60,"name":61,"tactic":62},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":50},{"id":64,"name":65,"tactic":66},"D3-NTSA","Network Traffic Signature Analysis",{"name":50},{"id":68,"name":69,"tactic":70},"D3-APCA","Application Protocol Command Analysis",{"name":50},{"id":72,"name":73,"tactic":74},"D3-NTCD","Network Traffic Community Deviation",{"name":50},{"id":76,"name":77,"tactic":78},"D3-RTSD","Remote Terminal Session Detection",{"name":50},{"id":80,"name":81,"tactic":82},"D3-ISVA","Inbound Session Volume Analysis",{"name":50},{"id":84,"name":85,"tactic":86},"D3-NTF","Network Traffic Filtering",{"name":87},"Isolate",{"id":89,"name":90,"tactic":91},"D3-ITF","Inbound Traffic Filtering",{"name":87},{"id":21,"name":22,"techniques":93},[],[],[],[],[98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134],{"_key":99},"OPENSUSE-SU-2025:14875-1",{"_key":101},"UBUNTU-CVE-2022-44572",{"_key":103},"USN-7036-1",{"_key":105},"SUSE-SU-2023:0276-1",{"_key":107},"OPENSUSE-SU-2024:12633-1",{"_key":109},"OPENSUSE-SU-2024:12634-1",{"_key":111},"OPENSUSE-SU-2024:12974-1",{"_key":113},"OPENSUSE-SU-2024:13167-1",{"_key":115},"OPENSUSE-SU-2024:13726-1",{"_key":117},"OPENSUSE-SU-2024:13727-1",{"_key":119},"OPENSUSE-SU-2025:14811-1",{"_key":121},"DLA-3298-1",{"_key":123},"DSA-5530-1",{"_key":125},"OPENSUSE-SU-2026:10358-1",{"_key":127},"OPENSUSE-SU-2026:10286-1",{"_key":129},"MGASA-2023-0106",{"_key":131},"DEBIAN-CVE-2022-44572",{"_key":133},"USN-5910-1",{"_key":135},"RHSA-2023:6818",[],[138,139,140,141,142,143,144,145,146,147,148,149],{"_key":99},{"_key":105},{"_key":107},{"_key":109},{"_key":111},{"_key":113},{"_key":115},{"_key":117},{"_key":119},{"_key":125},{"_key":127},{"_key":129},"2023-02-09T00:00:00.000Z","2024-08-03T13:54:03.874Z","Modified",{"cisa_kev":154,"cisa_ransomware":154,"cisa_vendor":9,"epss_severity":155,"epss_score":156,"severity":157,"severity_score":158,"severity_version":159,"severity_source":160,"severity_vector":161,"severity_status":152},false,"low",0.00255,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[163,170,175],{"url":164,"sources":165,"tags":167},"https://hackerone.com/reports/1639882",[166,160],"cve.org",[168,169],"Permissions Required","Third Party Advisory",{"url":171,"sources":172,"tags":173},"https://www.debian.org/security/2023/dsa-5530",[166,160],[174],"Vendor Advisory",{"url":176,"sources":177,"tags":178},"https://security.netapp.com/advisory/ntap-20231208-0014/",[166,160],[],[],{"date":181,"score":156,"percentile":182},"2026-06-04",0.49002,[184,188,191,194,197,199,201,204,207,210,214,217,220,223,226,230,233,236,240,243,246,249,252,255,258,261,264,267,271,274,277,280,283,286,289,292,295,298,301,303,307,310,313,316,318,321,324,327,330,333,336,339,342,345,348,351,354,357,360,364,367,370,373,376,379,382,385,388,391,394,397,400,403,406,409,412,415,418,421,423,426,428,431,434,437,440,443,446,449,451],{"date":185,"score":186,"percentile":187},"2025-11-04",0.00257,0.48892,{"date":189,"score":186,"percentile":190},"2025-11-05",0.48873,{"date":192,"score":186,"percentile":193},"2025-11-06",0.48887,{"date":195,"score":186,"percentile":196},"2025-11-07",0.48914,{"date":198,"score":186,"percentile":196},"2025-11-08",{"date":200,"score":186,"percentile":187},"2025-11-09",{"date":202,"score":186,"percentile":203},"2025-11-10",0.48865,{"date":205,"score":186,"percentile":206},"2025-11-11",0.4888,{"date":208,"score":186,"percentile":209},"2025-11-12",0.48903,{"date":211,"score":212,"percentile":213},"2025-11-13",0.00324,0.54914,{"date":215,"score":212,"percentile":216},"2025-11-14",0.54913,{"date":218,"score":212,"percentile":219},"2025-11-15",0.54905,{"date":221,"score":186,"percentile":222},"2025-11-16",0.489,{"date":224,"score":186,"percentile":225},"2025-11-17",0.48874,{"date":227,"score":228,"percentile":229},"2025-11-18",0.01715,0.80857,{"date":231,"score":228,"percentile":232},"2025-11-19",0.80859,{"date":234,"score":228,"percentile":235},"2025-11-20",0.80863,{"date":237,"score":238,"percentile":239},"2025-11-21",0.00225,0.45141,{"date":241,"score":238,"percentile":242},"2025-11-22",0.45136,{"date":244,"score":238,"percentile":245},"2025-11-23",0.45109,{"date":247,"score":238,"percentile":248},"2025-11-24",0.45101,{"date":250,"score":238,"percentile":251},"2025-11-25",0.45111,{"date":253,"score":238,"percentile":254},"2025-11-26",0.4511,{"date":256,"score":238,"percentile":257},"2025-11-27",0.45118,{"date":259,"score":238,"percentile":260},"2025-11-28",0.45085,{"date":262,"score":238,"percentile":263},"2025-11-29",0.45068,{"date":265,"score":238,"percentile":266},"2025-11-30",0.45053,{"date":268,"score":269,"percentile":270},"2025-12-01",0.00157,0.37052,{"date":272,"score":269,"percentile":273},"2025-12-02",0.3706,{"date":275,"score":269,"percentile":276},"2025-12-03",0.37058,{"date":278,"score":186,"percentile":279},"2025-12-04",0.48761,{"date":281,"score":186,"percentile":282},"2025-12-05",0.48782,{"date":284,"score":186,"percentile":285},"2025-12-06",0.48784,{"date":287,"score":186,"percentile":288},"2025-12-07",0.48769,{"date":290,"score":186,"percentile":291},"2025-12-08",0.48774,{"date":293,"score":186,"percentile":294},"2025-12-09",0.48796,{"date":296,"score":186,"percentile":297},"2025-12-10",0.4886,{"date":299,"score":186,"percentile":300},"2025-12-11",0.48877,{"date":302,"score":186,"percentile":222},"2025-12-12",{"date":304,"score":305,"percentile":306},"2025-12-13",0.00236,0.46509,{"date":308,"score":305,"percentile":309},"2025-12-14",0.46491,{"date":311,"score":305,"percentile":312},"2025-12-15",0.4647,{"date":314,"score":305,"percentile":315},"2025-12-16",0.46483,{"date":317,"score":305,"percentile":306},"2025-12-17",{"date":319,"score":305,"percentile":320},"2025-12-18",0.46553,{"date":322,"score":305,"percentile":323},"2025-12-19",0.46561,{"date":325,"score":305,"percentile":326},"2025-12-20",0.46534,{"date":328,"score":305,"percentile":329},"2025-12-21",0.46505,{"date":331,"score":305,"percentile":332},"2025-12-22",0.46478,{"date":334,"score":305,"percentile":335},"2025-12-23",0.46476,{"date":337,"score":305,"percentile":338},"2025-12-24",0.46488,{"date":340,"score":305,"percentile":341},"2025-12-25",0.46535,{"date":343,"score":305,"percentile":344},"2025-12-26",0.46522,{"date":346,"score":305,"percentile":347},"2025-12-27",0.46549,{"date":349,"score":305,"percentile":350},"2025-12-28",0.46457,{"date":352,"score":305,"percentile":353},"2025-12-29",0.46437,{"date":355,"score":305,"percentile":356},"2025-12-30",0.46433,{"date":358,"score":305,"percentile":359},"2025-12-31",0.46477,{"date":361,"score":362,"percentile":363},"2026-01-01",0.00176,0.39546,{"date":365,"score":362,"percentile":366},"2026-01-02",0.39523,{"date":368,"score":362,"percentile":369},"2026-01-03",0.39515,{"date":371,"score":305,"percentile":372},"2026-01-04",0.4642,{"date":374,"score":305,"percentile":375},"2026-01-05",0.46399,{"date":377,"score":305,"percentile":378},"2026-01-06",0.46401,{"date":380,"score":186,"percentile":381},"2026-01-07",0.48833,{"date":383,"score":186,"percentile":384},"2026-01-08",0.48857,{"date":386,"score":186,"percentile":387},"2026-01-09",0.48834,{"date":389,"score":186,"percentile":390},"2026-01-10",0.48828,{"date":392,"score":186,"percentile":393},"2026-01-11",0.48809,{"date":395,"score":186,"percentile":396},"2026-01-12",0.48767,{"date":398,"score":186,"percentile":399},"2026-01-13",0.48742,{"date":401,"score":186,"percentile":402},"2026-01-14",0.48788,{"date":404,"score":186,"percentile":405},"2026-01-15",0.48789,{"date":407,"score":186,"percentile":408},"2026-01-16",0.48811,{"date":410,"score":186,"percentile":411},"2026-01-17",0.48785,{"date":413,"score":186,"percentile":414},"2026-01-18",0.48757,{"date":416,"score":186,"percentile":417},"2026-01-19",0.48734,{"date":419,"score":186,"percentile":420},"2026-01-20",0.48737,{"date":422,"score":186,"percentile":420},"2026-01-21",{"date":424,"score":186,"percentile":425},"2026-01-22",0.48741,{"date":427,"score":186,"percentile":402},"2026-01-23",{"date":429,"score":186,"percentile":430},"2026-01-24",0.4879,{"date":432,"score":186,"percentile":433},"2026-01-25",0.48739,{"date":435,"score":186,"percentile":436},"2026-01-26",0.4871,{"date":438,"score":186,"percentile":439},"2026-01-27",0.48716,{"date":441,"score":186,"percentile":442},"2026-01-28",0.48726,{"date":444,"score":186,"percentile":445},"2026-01-29",0.48719,{"date":447,"score":186,"percentile":448},"2026-01-30",0.48727,{"date":450,"score":186,"percentile":417},"2026-01-31",{"date":452,"score":453,"percentile":454},"2026-02-01",0.00191,0.41089,[456],{"source":160,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":457,"cvss_v4_0":9},{"baseScore":158,"baseSeverity":458,"vectorString":161,"impactScore":459,"exploitabilityScore":460},"HIGH",6,10,[462],{"ecosystem":9,"name":463,"vendor":463,"product":463,"cpe_part":464,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":465},"rack","a",[466,472,477],{"version":467,"is_range":468,"range_type":469,"version_start":9,"version_start_type":9,"version_end":470,"version_end_type":471,"fixed_in":9},"lt2.0.9.2",true,"cpe","2.0.9.2","excluding",{"version":473,"is_range":468,"range_type":469,"version_start":474,"version_start_type":475,"version_end":476,"version_end_type":471,"fixed_in":9},"gte2.1.0_lt2.1.4.2","2.1.0","including","2.1.4.2",{"version":478,"is_range":468,"range_type":469,"version_start":479,"version_start_type":475,"version_end":480,"version_end_type":471,"fixed_in":9},"gte2.2.0_lt2.2.4.1","2.2.0","2.2.4.1"]