MinorCritical vulnerability
CVE-2026-67989 (CVSS 7.5)
NVD · officialPublished Oct 2, 2026Risk 23/100
crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in Mistral model capability matching on Ruby 3.1.x
Technical details
CVSS
7.5
AV:NetworkAC:LowPR:NoneUI:NoneC:NoneI:NoneA:High
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source