GHSA-m63j-wh5w-c252 Denial of Service Vulnerability in Action View

• RubyGems actionview: >= 4.0.0, < 4.2.11.1 → fixed in 4.2.11.1 • RubyGems actionview: >= 5.2.0, < 5.2.2.1 → fixed in 5.2.2.1 • RubyGems actionview: >= 5.1.0, < 5.1.6.2 → fixed in 5.1.6.2 • RubyGems actionview: >= 5.0.0, < 5.0.7.2 → fixed in 5.0.7.2 • RubyGems actionview: >= 6.0.0.beta1, < 6.0.0.beta3 → fixed in 6.0.0.beta3

Denial of Service Vulnerability in Action View Impact ------ Specially crafted accept headers can cause the Action View template location code to consume 100% CPU, causing the server unable to process requests. This impacts all Rails applications that render views. All users running an affected release should either upgrade or use one of the workarounds immediately. Releases -------- The 6.0.0.beta3, 5.2.2.1, 5.1.6.2, 5.0.7.2, and 4.2.11.1 releases are available at the normal locations. Workarounds ----------- This vulnerability can be mitigated by wrapping `render` calls with `respond_to` blocks. For example, the following example is vulnerable: ``` ruby class UserController of GitHub