Package · RubyGems

addressable

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 7.5

CVE-2026-35611

Addressable has a Regular Expression Denial of Service in Addressable templates

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 to before 2.9.0, within the URI template implementation in Addressable, two classes of URI template generate regular expressions vulnera…

sporkmonger addressable kube-fluentd-operator logstash-9.3-iamguarded-compat Debian Ubuntu Azure Linux Alpine Wolfi RubyGems

Apr 7, 2026
High 7.5

CVE-2021-32740

Regular Expression Denial of Service in Addressable templates

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addr…

sporkmonger addressable ruby-addressable ruby-addressable Debian Ubuntu Alpine RubyGems

Jul 6, 2021