ruby-lang CGI
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-27220 | < 0.3.5.1 ; 0.3.6 – < 0.3.7 ; 0.4.0 – < 0.4.2 | In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method. | HIGH 7.5 | 0.8 % | ||
| CVE-2025-27219 | < 0.3.5.1 ; 0.3.6 – < 0.3.7 ; 0.4.0 – < 0.4.2 | In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerabi | HIGH 7.5 | 0.8 % |