CVE-2022-23837: Contribsys Sidekiq

High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days.

In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.

Affected products

• Contribsys Sidekiq: before 5.2.10 (fixed in 5.2.10); from 6.0.0, before 6.4.0 (fixed in 6.4.0)
• Debian Debian Linux: version 9.0 only

Published 2022-01-21. Last modified 2026-06-17.