Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: ruby-lang CGI 0.3.5.1, 0.3.7, 0.4.2 Clear all filters
TI-2025-20077 CVE-2025-27220 · GHSA-mhwm-jh88-3gjf

Regular expression denial of service in ruby CGI

Priority LOW 34

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0076 Published 2025-03-03 Partial fix · 0.3.5.1, 0.3.7 +1 CWE-1333
TI-2025-20076 CVE-2025-27219 · GHSA-gh9q-2xrm-x6qv

Resource allocation without limits in ruby CGI

Priority LOW 34

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00849 Published 2025-03-03 Partial fix · 0.3.5.1, 0.3.7 +1 CWE-770