sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number (GHSA-c9c5-9fpr-m882)
Published: 2017-10-24T18:33:36Z
Aliases: CVE-2014-9490
Severity: MODERATE · CWE: CWE-400

The `numtok` function in `lib/raven/okjson.rb` in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service via a large exponent value in a scientific number.

Affected packages:
package: ecosystem: RubyGems
name: sentry-raven
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.12.2