CVE-2023-31606: Promptworks Redcloth

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

Affected products

• Promptworks Redcloth: from 4.0.0, up to and including 4.3.2

Published 2023-06-06. Last modified 2026-06-17.