参照: Official debian advisory, NVD, CVE.org · CVE 詳細
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2014-10077 not yet assigned priority: Debian including 1 source packages (ruby-i18n), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5.
Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash.