Skip to content
OpenAdvisories

Package · RubyGems

cgi

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2021-33621

    HTTP response splitting in CGI

    The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.

    ruby2.3 ruby ruby2.5 jruby Debian Ubuntu Alpine RubyGems
  • High 7.5
    CVE-2021-41819

    Cookie Prefix Spoofing in CGI::Cookie.parse

    CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.

    ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Alpine RubyGems