sporkmonger addressable

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-35611>= 2.3.0, < 2.9.0Addressable has a Regular Expression Denial of Service in Addressable templatesHIGH 7.50.4 %
CVE-2021-32740> 2.3.0, <= 2.7.0Regular Expression Denial of Service in Addressable templatesHIGH 7.52.1 %