CVE-2022-28739 vulnerability in Ruby Programming Language and Other Products
Published on May 9, 2022
There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f.
Products Associated with CVE-2022-28739
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2022-28739 are published in these products:
Exploit Probability
EPSS
0.31%
Percentile
53.41%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.