TI-2025-38040 CVE-2025-61594 · GHSA-j4pr-3wm6-xx2r
URI Credential Leakage Bypass over CVE-2025-27221
Priority LOW 18
URI is a module providing classes to handle Uniform Resource Identifiers.
Vulnerabilities
4 records
TI-2025-20078 CVE-2025-27221 · GHSA-22h5-pq3x-2gf2
Information disclosure in ruby URI
Priority LOW 25
In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.
TI-2023-18437 CVE-2023-36617 · GHSA-hww2-5g85-429m
A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby.
Priority LOW 27
A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby.
TI-2023-13266 CVE-2023-28755 · GHSA-hv5j-3h9f-99c2
A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1.
Priority LOW 35
A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1.