ruby-lang URI
1 published vulnerability names this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-27221 | < 0.11.3 ; 0.12.0 – < 0.12.4 ; 0.13.0 – < 0.13.2 ; … | In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication cr | MEDIUM 5.3 | 0.5 % |