TI-2023-13266 CVE-2023-28755 · GHSA-hv5j-3h9f-99c2
A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1.
Priority LOW 35
A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1.
ruby
Records136All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical18CVSS 9.0–10.0
CVSS high49CVSS 7.0–8.9
Exploited now
ruby records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Uri · all components
TI-2023-18437 CVE-2023-36617 · GHSA-hww2-5g85-429m
A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby.
Priority LOW 27
A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby.
TI-2025-20078 CVE-2025-27221 · GHSA-22h5-pq3x-2gf2
Information disclosure in ruby URI
Priority LOW 25
In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.
TI-2025-38040 CVE-2025-61594 · GHSA-j4pr-3wm6-xx2r
URI Credential Leakage Bypass over CVE-2025-27221
Priority LOW 18
URI is a module providing classes to handle Uniform Resource Identifiers.