Product
An unescaped regular expression in Active Support’s safe_constantize method allows unauthenticated remote attackers to trigger a server process crash via Action Cable, resulting in a Denial of Service.