Package · Wolfi

ruby-3.4-dev

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.0

CVE-2025-27220

CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.

ruby-lang CGI ruby2.3 ruby2.5 Debian Ubuntu Azure Linux Wolfi RubyGems

Mar 3, 2025
Medium 5.8

CVE-2025-27219

CGI has Denial of Service (DoS) potential in Cookie.parse

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead …

ruby-lang CGI ruby2.3 ruby Debian Ubuntu Azure Linux Alpine Wolfi RubyGems

Mar 3, 2025