Vulnerability in Hackerone Private_address_check Ruby Gem

CVE-2018-3759

private_address_check ruby gem before 0.5.0 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition due to the address the socket uses not being checked. DNS entries with a TTL of 0 can trigger this case where the initial reso…

Vulnerability class: Race Condition

EPSS: 0.002 (39.4th percentile) — read the EPSS interpretation.