Количество 22
Количество 22
BDU:2025-05128
Уязвимость программного средства cgi gem, связанная с неправильная проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20250417-12
Множественные уязвимости ruby
CVE-2025-27219
In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.
CVE-2025-27219
In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.
CVE-2025-27219
In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.
CVE-2025-27219
In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.
CVE-2025-27219
In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in ...
GHSA-gh9q-2xrm-x6qv
CGI has Denial of Service (DoS) potential in Cookie.parse
RLSA-2025:4487
Moderate: ruby security update
ELSA-2025-4487
ELSA-2025-4487: ruby security update (MODERATE)
SUSE-SU-2025:1369-1
Security update for ruby2.5
RLSA-2025:8131
Moderate: ruby security update
RLSA-2025:4493
Moderate: ruby:3.3 security update
RLSA-2025:10217
Moderate: ruby:3.3 security update
ELSA-2025-8131
ELSA-2025-8131: ruby security update (MODERATE)
ELSA-2025-4493
ELSA-2025-4493: ruby:3.3 security update (MODERATE)
ELSA-2025-10217
ELSA-2025-10217: ruby:3.3 security update (MODERATE)
RLSA-2025:4488
Moderate: ruby:3.1 security update
RLSA-2025:4063
Moderate: ruby:3.1 security update
ELSA-2025-4488
ELSA-2025-4488: ruby:3.1 security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-05128 Уязвимость программного средства cgi gem, связанная с неправильная проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | ROS-20250417-12 Множественные уязвимости ruby | CVSS3: 7.5 | больше 1 года назад | |
 | CVE-2025-27219 In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies. | CVSS3: 5.8 | 1% Низкий | больше 1 года назад |
 | CVE-2025-27219 In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies. | CVSS3: 5.3 | 1% Низкий | больше 1 года назад |
 | CVE-2025-27219 In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies. | CVSS3: 5.8 | 1% Низкий | больше 1 года назад |
 | CVE-2025-27219 In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies. | CVSS3: 5.3 | 1% Низкий | больше 1 года назад |
| CVE-2025-27219 In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in ... | CVSS3: 5.8 | 1% Низкий | больше 1 года назад |
| GHSA-gh9q-2xrm-x6qv CGI has Denial of Service (DoS) potential in Cookie.parse | CVSS3: 5.8 | 1% Низкий | больше 1 года назад |
 | RLSA-2025:4487 Moderate: ruby security update | около 1 года назад | ||
| ELSA-2025-4487 ELSA-2025-4487: ruby security update (MODERATE) | около 1 года назад | ||
 | SUSE-SU-2025:1369-1 Security update for ruby2.5 | больше 1 года назад | ||
| RLSA-2025:8131 Moderate: ruby security update | 10 месяцев назад | ||
| RLSA-2025:4493 Moderate: ruby:3.3 security update | около 1 года назад | ||
| RLSA-2025:10217 Moderate: ruby:3.3 security update | около 1 года назад | ||
| ELSA-2025-8131 ELSA-2025-8131: ruby security update (MODERATE) | около 1 года назад | ||
| ELSA-2025-4493 ELSA-2025-4493: ruby:3.3 security update (MODERATE) | около 1 года назад | ||
| ELSA-2025-10217 ELSA-2025-10217: ruby:3.3 security update (MODERATE) | около 1 года назад | ||
| RLSA-2025:4488 Moderate: ruby:3.1 security update | около 1 года назад | ||
| RLSA-2025:4063 Moderate: ruby:3.1 security update | около 1 года назад | ||
| ELSA-2025-4488 ELSA-2025-4488: ruby:3.1 security update (MODERATE) | около 1 года назад |
Уязвимостей на страницу