ruby-lang URI Schwachstellen (CVE)

Für ruby-lang URI veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

2.1Niedrig

CVE-2025-61594 vor 10 Monaten

URI Credential Leakage Bypass over CVE-2025-27221

ruby uri

URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to…

3.2Niedrig

CVE-2025-27221 vor 1 Jahr

ruby-lang URI

In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.