CVE-2026-33169
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.
Published Mar 24, 2026 · updated Jun 17, 2026 · rubyonrails rails
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. uses a lookahead-based regular expression with to insert thousands delimiters. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, the interaction between the repeated lookahead group and can produce quadratic time complexity on long digit strings. Versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 contain a patch.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 24, 2026 · NIST NVD
Detected
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. uses a lookahead-based regular expression with to insert thousands delimiters. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, the interaction between the repeated lookahead group and can produce quadratic time complexity on long digit strings. Versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 conta
Jun 17, 2026 · NIST NVD
Updated
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. uses a lookahead-based regular expression with to insert thousands delimiters. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, the interaction between the repeated lookahead group and can produce quadratic time complexity on long digit strings. Versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 conta
Affected
- cpe rubyonrails/railsversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-33169
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-33169
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. uses a lookahead-based regular expression with to insert thousands delimiters. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, the i
nvd.nist.gov