Vulnerabilidades de ruby-lang URI (CVE)

Registros CVE publicados para ruby-lang URI, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados
2.1Baja
CVE-2025-61594

URI Credential Leakage Bypass over CVE-2025-27221

ruby uri

URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to…

3.2Baja
CVE-2025-27221
ruby-lang URI

In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.