Skip to content
OpenAdvisories

Vendor

ruby-lang

4 known vulnerabilities.

Products

CGI 2 Ruby 1 URI 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.0
    CVE-2025-27220

    CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement

    In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.

    ruby-lang CGI ruby2.3 ruby2.5 Debian Ubuntu RubyGems
  • Medium 5.8
    CVE-2025-27219

    CGI has Denial of Service (DoS) potential in Cookie.parse

    In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead …

    ruby-lang CGI ruby2.3 ruby Debian Ubuntu Alpine RubyGems