Add gems/uri/CVE-2023-28755.yml

Author: Adrian-Hirt

CONTRIBUTORS.md

@@ -38,5 +38,6 @@ This database would not be possible without volunteers willing to submit pull re
 * [Brendan Coles](https://github.com/bcoles)
 * [Florian Wininger](https://github.com/fwininger)
 * [Al Snow](https://github.com/jasnow)
+* [Adrian Hirt](https://github.com/Adrian-Hirt)
 
 The rubysec.com domain was graciously donated by [Jordi Massaguer](https://github.com/jordimassaguerpla).

gems/uri/CVE-2023-28755.yml

@@ -0,0 +1,18 @@
+---
+gem: uri
+cve: 2023-28755
+ghsa: hv5j-3h9f-99c2
+url: https://github.com/advisories/GHSA-hv5j-3h9f-99c2
+date: 2023-03-31
+title: Ruby URI component ReDoS issue
+description: |
+  A ReDoS issue was discovered in the URI component through 0.12.0 in
+  Ruby through 3.2.1. The URI parser mishandles invalid URLs that have
+  specific characters. It causes an increase in execution time for parsing
+  strings to URI objects. The fixed versions are 0.12.1, 0.11.1,
+  0.10.2 and 0.10.0.1.
+patched_versions:
+  - ~> 0.10.0.1
+  - ~> 0.10.2
+  - ~> 0.11.1
+  - ">= 0.12.1"