{"id":"CVE-2025-27220","aliases":["ALSA-2025:4063","ALSA-2025:4488","AZL-57791","AZL-57938","CLSA-2025-1745585192","DEBIAN-CVE-2025-27220","DLA-4082-1","EUVD-2025-5509","GHSA-mhwm-jh88-3gjf","MGASA-2025-0290","OESA-2025-1244","OESA-2025-1261","OESA-2025-1262","OESA-2025-1263","OESA-2025-1264","RHSA-2025:4063","RHSA-2025:4487","RHSA-2025:4488","RLSA-2025:4063","RLSA-2025:4487","RLSA-2025:4488","SUSE-SU-2025:1369-1","SUSE-SU-2025:4264-1","UBUNTU-CVE-2025-27220","USN-7418-1","USN-7442-1"],"status":"published","title":"CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement","description":"In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0076,"percentile":0.55722,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1333"],"published":"2025-03-03T00:00:00Z","modified":"2026-10-31T15:02:25Z","fixes":[{"ecosystem":"RubyGems","package":"cgi","fixed_in":["0.3.5.1","0.3.7","0.4.2"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:2","package":"ruby","fixed_in":["3.1.4-9"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"ruby","fixed_in":["3.3.5-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ruby3.3","fixed_in":["3.3.7-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ruby3.3","fixed_in":["3.3.7-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ruby2.3","fixed_in":["2.3.1-2~ubuntu16.04.16+esm10"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ruby2.5","fixed_in":["2.5.1-1ubuntu1.16+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ruby2.7","fixed_in":["2.7.0-5ubuntu1.18"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ruby3.0","fixed_in":["3.0.2-7ubuntu2.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ruby3.2","fixed_in":["3.2.3-1ubuntu0.24.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"ruby3.3","fixed_in":["3.3.7-1ubuntu2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.5.1"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.6"},{"last_affected":"0.3.6"},{"fixed":"0.3.7"}]}],"versions":["0.3.6"]},{"source":"ghsa","ecosystem":"RubyGems","package":"cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.4.0"},{"fixed":"0.4.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-1.module_el8.9.0+3746+91b8233a"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-1.module_el8.10.0+3854+02eaa59a"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.27-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.11-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.1-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-3.module_el8.10.0+3854+02eaa59a"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-3.module_el8.9.0+3746+91b8233a"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-3.module_el8.10.0+3854+02eaa59a"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1.module_el8.10.0+3854+02eaa59a"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1.module_el8.9.0+3746+91b8233a"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-1.module_el8.10.0+3854+02eaa59a"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.4-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.6-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.1.1-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.9-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.3-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.3-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-145.module_el8.10.0+3984+cf55e3df"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.4-1.module_el9.1.0+8+503f6fbd"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.4-1.module_el9.1.0+8+503f6fbd"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-1.module_el9.1.0+8+503f6fbd"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-1.module_el9.1.0+8+503f6fbd"}]}],"bundled":7},{"source":"osv","ecosystem":"Azure Linux:2","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-9"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.5-3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.2-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14.1-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14.1-39.el7_9.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"ruby3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2-7","3.1.2-7+deb12u1","3.1.2-7+hurd.1","3.1.2-8","3.1.2-8.1~exp1","3.1.2-8.3","3.1.2-8.4","3.1.2-8.5"]},{"source":"osv","ecosystem":"Debian:13","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"ruby2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.4-1+deb11u5"}]}],"versions":["2.7.4-1","2.7.4-1+deb11u1","2.7.4-1+deb11u2","2.7.4-1+deb11u3","2.7.4-1+deb11u4"],"bundled":3},{"source":"osv","ecosystem":"RubyGems","package":"cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.5.1"}]}],"versions":["0.1.0","0.1.0.1","0.1.0.2","0.1.1","0.2.0","0.2.1","0.2.2","0.3.0","0.3.1","0.3.2","0.3.3","0.3.4","0.3.5"]},{"source":"osv","ecosystem":"RubyGems","package":"cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.3.6"},{"fixed":"0.3.7"}]}],"versions":["0.3.6"]},{"source":"osv","ecosystem":"RubyGems","package":"cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.4.0"},{"fixed":"0.4.2"}]}],"versions":["0.4.0","0.4.1","0.4.2.beta1","0.4.2.beta2"]},{"source":"osv","ecosystem":"Mageia:9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-47.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.8-133.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-142.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-149.oe2403"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-149.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-142.oe2203sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-bundled-gems-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+21470+43ec8058"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+21470+43ec8058"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.27-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.11-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.11-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.0-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3-3.module+el8.10.0+21470+43ec8058"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3-3.module+el8.10.0+21470+43ec8058"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3-3.module+el8.10.0+21470+43ec8058"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3-3.module+el8.10.0+21470+43ec8058"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-1.module+el8.10.0+21470+43ec8058"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-1.module+el8.10.0+21470+43ec8058"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-1.module+el8.10.0+21470+43ec8058"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-1.module+el8.10.0+21470+43ec8058"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.4-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.4-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.6-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rbs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.1.1-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.9-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.1-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.3-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.27-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.27-145.module+el8.10.0+23011+f9d508f8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.7-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.7-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.7-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.7-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.7-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.7-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.7-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.33-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.7-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.7-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.1-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.1-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.2-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.2-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.3-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.3.4.1-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.5-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.9-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.7-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.2-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.33-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.33-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.7-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-bundled-gems-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.27-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.11-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.11-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.0-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-1.module+el9.1.0+15737+76195479"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-1.module+el9.1.0+15737+76195479"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-1.module+el9.1.0+15737+76195479"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-1.module+el9.1.0+15737+76195479"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.module+el9.1.0+15737+76195479"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.module+el9.1.0+15737+76195479"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.module+el9.1.0+15737+76195479"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.module+el9.1.0+15737+76195479"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.4-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.4-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.6-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rbs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.1.1-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.9-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.1-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.3-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.27-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.27-146.module+el9.5.0+23003+a4c328ce"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-145.module+el8.10.0+1957+16e0d1a2"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1827+16ecb9d2"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.5.0+668+665814fa"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.9.0+1537+0b2034bd"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1679+61871737"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1820+f3fffb92"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1826+b62220b4"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3-3.module+el8.10.0+1744+6c504228"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3-3.module+el8.10.0+1826+b62220b4"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-1.module+el8.10.0+1741+bdb5b6ca"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-1.module+el8.10.0+1826+b62220b4"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.7-165.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.7-146.module+el9.5.0+31847+8b291b93"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-1.module+el9.5.0+31847+8b291b93"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.module+el9.5.0+31847+8b291b93"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150000.4.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.9-150700.24.3.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.6-5ubuntu1","1.5.6-6","1.5.6-7","1.5.6-9+deb8u2build0.14.04.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.16+esm10"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2","2.3.1-2~16.04.4","2.3.1-2~16.04.5","2.3.1-2~16.04.6","2.3.1-2~16.04.7","2.3.1-2~16.04.9","2.3.1-2~16.04.10","2.3.1-2~16.04.11","2.3.1-2~16.04.12","2.3.1-2~ubuntu16.04.13","2.3.1-2~ubuntu16.04.14","2.3.1-2~ubuntu16.04.15","2.3.1-2~ubuntu16.04.16","2.3.1-2~ubuntu16.04.16+esm1","2.3.1-2~ubuntu16.04.16+esm2","2.3.1-2~ubuntu16.04.16+esm3","2.3.1-2~ubuntu16.04.16+esm4","2.3.1-2~ubuntu16.04.16+esm5","2.3.1-2~ubuntu16.04.16+esm6","2.3.1-2~ubuntu16.04.16+esm7","2.3.1-2~ubuntu16.04.16+esm8","2.3.1-2~ubuntu16.04.16+esm9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.21-2ubuntu4","1.7.22-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-1ubuntu1.16+esm4"}]}],"versions":["2.5.0~preview1-1ubuntu2","2.5.0-4ubuntu1","2.5.0-4ubuntu4","2.5.0-5ubuntu1","2.5.0-6ubuntu1","2.5.1-1ubuntu1","2.5.1-1ubuntu1.1","2.5.1-1ubuntu1.2","2.5.1-1ubuntu1.4","2.5.1-1ubuntu1.5","2.5.1-1ubuntu1.6","2.5.1-1ubuntu1.7","2.5.1-1ubuntu1.8","2.5.1-1ubuntu1.9","2.5.1-1ubuntu1.10","2.5.1-1ubuntu1.11","2.5.1-1ubuntu1.12","2.5.1-1ubuntu1.13","2.5.1-1ubuntu1.14","2.5.1-1ubuntu1.15","2.5.1-1ubuntu1.16","2.5.1-1ubuntu1.16+esm1","2.5.1-1ubuntu1.16+esm3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.1.13.0-1","9.1.17.0-1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ruby2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-5ubuntu1.18"}]}],"versions":["2.7.0-1","2.7.0-2","2.7.0-3","2.7.0-4","2.7.0-4ubuntu1","2.7.0-5ubuntu1","2.7.0-5ubuntu1.1","2.7.0-5ubuntu1.2","2.7.0-5ubuntu1.3","2.7.0-5ubuntu1.4","2.7.0-5ubuntu1.5","2.7.0-5ubuntu1.6","2.7.0-5ubuntu1.7","2.7.0-5ubuntu1.8","2.7.0-5ubuntu1.9","2.7.0-5ubuntu1.10","2.7.0-5ubuntu1.11","2.7.0-5ubuntu1.12","2.7.0-5ubuntu1.13","2.7.0-5ubuntu1.14","2.7.0-5ubuntu1.15","2.7.0-5ubuntu1.16","2.7.0-5ubuntu1.17"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.1.17.0-3","9.1.17.0-3build5","9.1.17.0-3build6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ruby3.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-7ubuntu2.10"}]}],"versions":["3.0.2-5ubuntu1","3.0.2-7","3.0.2-7ubuntu2","3.0.2-7ubuntu2.1","3.0.2-7ubuntu2.2","3.0.2-7ubuntu2.3","3.0.2-7ubuntu2.4","3.0.2-7ubuntu2.5","3.0.2-7ubuntu2.6","3.0.2-7ubuntu2.7","3.0.2-7ubuntu2.8"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.3.9.0+ds-1","9.4.5.0+ds-1","9.4.5.0+ds-1ubuntu1","9.4.6.0+ds-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ruby3.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-1ubuntu0.24.04.5"}]}],"versions":["3.2.3-1","3.2.3-1build2","3.2.3-1build3","3.2.3-1ubuntu0.24.04.1","3.2.3-1ubuntu0.24.04.3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.8.0+ds-2ubuntu1","9.4.8.0+ds-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-1ubuntu2"}]}]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.8.0+ds-3ubuntu1","9.4.14.0+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.8.0+ds-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ruby2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-5ubuntu1.18"}]}],"versions":["2.7.0-1","2.7.0-2","2.7.0-3","2.7.0-4","2.7.0-4ubuntu1","2.7.0-5ubuntu1","2.7.0-5ubuntu1.1","2.7.0-5ubuntu1.2","2.7.0-5ubuntu1.3","2.7.0-5ubuntu1.4","2.7.0-5ubuntu1.5","2.7.0-5ubuntu1.6","2.7.0-5ubuntu1.7","2.7.0-5ubuntu1.8","2.7.0-5ubuntu1.9","2.7.0-5ubuntu1.10","2.7.0-5ubuntu1.11","2.7.0-5ubuntu1.12","2.7.0-5ubuntu1.13","2.7.0-5ubuntu1.14","2.7.0-5ubuntu1.15","2.7.0-5ubuntu1.16","2.7.0-5ubuntu1.17"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ruby3.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-7ubuntu2.10"}]}],"versions":["3.0.2-5ubuntu1","3.0.2-7","3.0.2-7ubuntu2","3.0.2-7ubuntu2.1","3.0.2-7ubuntu2.2","3.0.2-7ubuntu2.3","3.0.2-7ubuntu2.4","3.0.2-7ubuntu2.5","3.0.2-7ubuntu2.6","3.0.2-7ubuntu2.7","3.0.2-7ubuntu2.8"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ruby3.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-1ubuntu0.24.04.5"}]}],"versions":["3.2.3-1","3.2.3-1build2","3.2.3-1build3","3.2.3-1ubuntu0.24.04.1","3.2.3-1ubuntu0.24.04.3"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.16+esm10"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2","2.3.1-2~16.04.4","2.3.1-2~16.04.5","2.3.1-2~16.04.6","2.3.1-2~16.04.7","2.3.1-2~16.04.9","2.3.1-2~16.04.10","2.3.1-2~16.04.11","2.3.1-2~16.04.12","2.3.1-2~ubuntu16.04.13","2.3.1-2~ubuntu16.04.14","2.3.1-2~ubuntu16.04.15","2.3.1-2~ubuntu16.04.16","2.3.1-2~ubuntu16.04.16+esm1","2.3.1-2~ubuntu16.04.16+esm2","2.3.1-2~ubuntu16.04.16+esm3","2.3.1-2~ubuntu16.04.16+esm4","2.3.1-2~ubuntu16.04.16+esm5","2.3.1-2~ubuntu16.04.16+esm6","2.3.1-2~ubuntu16.04.16+esm7","2.3.1-2~ubuntu16.04.16+esm8","2.3.1-2~ubuntu16.04.16+esm9"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-1ubuntu1.16+esm4"}]}],"versions":["2.5.0~preview1-1ubuntu2","2.5.0-4ubuntu1","2.5.0-4ubuntu4","2.5.0-5ubuntu1","2.5.0-6ubuntu1","2.5.1-1ubuntu1","2.5.1-1ubuntu1.1","2.5.1-1ubuntu1.2","2.5.1-1ubuntu1.4","2.5.1-1ubuntu1.5","2.5.1-1ubuntu1.6","2.5.1-1ubuntu1.7","2.5.1-1ubuntu1.8","2.5.1-1ubuntu1.9","2.5.1-1ubuntu1.10","2.5.1-1ubuntu1.11","2.5.1-1ubuntu1.12","2.5.1-1ubuntu1.13","2.5.1-1ubuntu1.14","2.5.1-1ubuntu1.15","2.5.1-1ubuntu1.16","2.5.1-1ubuntu1.16+esm1","2.5.1-1ubuntu1.16+esm3"],"bundled":4}],"products":[{"vendor":"ruby-lang","product":"cgi"}],"references":[{"url":"https://hackerone.com/reports/2890322","tags":["Permissions Required","web","report"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cgi/CVE-2025-27220.yml","tags":["Third Party Advisory","advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00008.html","tags":["web"]},{"url":"https://github.com/ruby/cgi/pull/52","tags":["web"]},{"url":"https://github.com/ruby/cgi/pull/53","tags":["web"]},{"url":"https://github.com/ruby/cgi/pull/54","tags":["web"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27220","tags":["web","advisory","report"]},{"url":"https://www.ruby-lang.org/en/news/2025/02/26/security-advisories","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27220","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-mhwm-jh88-3gjf"},{"url":"https://access.redhat.com/errata/RHSA-2025:4063","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-39908","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-41123","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-41946","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-43398","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-27219","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-27220","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-27221","tags":["report"]},{"url":"https://bugzilla.redhat.com/2298243","tags":["report"]},{"url":"https://bugzilla.redhat.com/2302268","tags":["report"]},{"url":"https://bugzilla.redhat.com/2302272","tags":["report"]},{"url":"https://bugzilla.redhat.com/2307297","tags":["report"]},{"url":"https://bugzilla.redhat.com/2349696","tags":["report"]},{"url":"https://bugzilla.redhat.com/2349699","tags":["report"]},{"url":"https://bugzilla.redhat.com/2349700","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-4063.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4488","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-4488.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2025-1745585192.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27220.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-27220","tags":["advisory"]},{"url":"https://github.com/ruby/cgi","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2025-0290.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34179","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7418-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1244","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27221","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1261","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1262","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1263","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1264","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2298243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2302268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2302272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2307297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2349696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2349699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2349700","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-55408","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4063.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-39908","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39908","tags":["advisory"]},{"url":"https://github.com/ruby/rexml/security/advisories/GHSA-4xqq-m2hx-25v8","tags":["article"]},{"url":"https://www.ruby-lang.org/en/news/2024/07/16/dos-rexml-cve-2024-39908","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-41123","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41123","tags":["advisory"]},{"url":"https://github.com/ruby/rexml/security/advisories/GHSA-r55c-59qm-vjw6","tags":["article"]},{"url":"https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh","tags":["article"]},{"url":"https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41123","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-41946","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41946","tags":["advisory"]},{"url":"https://github.com/ruby/rexml/commit/033d1909a8f259d5a7c53681bcaf14f13bcf0368","tags":["article"]},{"url":"https://github.com/ruby/rexml/security/advisories/GHSA-5866-49gr-22v4","tags":["article"]},{"url":"https://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml","tags":["article"]},{"url":"https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-43398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-43398","tags":["advisory"]},{"url":"https://github.com/ruby/rexml/releases/tag/v3.3.6","tags":["article"]},{"url":"https://github.com/ruby/rexml/security/advisories/GHSA-vmwr-mc7x-5vc3","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27219","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2025/02/26/security-advisories/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27221","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2025-27221.yml","tags":["article"]},{"url":"https://hackerone.com/reports/2957667","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4487","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4487.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4488.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:4063","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:4487","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:4488","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251369-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230930","tags":["report"]},{"url":"https://bugzilla.suse.com/1235773","tags":["report"]},{"url":"https://bugzilla.suse.com/1237804","tags":["report"]},{"url":"https://bugzilla.suse.com/1237806","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27220","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254264-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1225905","tags":["report"]},{"url":"https://bugzilla.suse.com/1232440","tags":["report"]},{"url":"https://bugzilla.suse.com/1237805","tags":["report"]},{"url":"https://bugzilla.suse.com/1245254","tags":["report"]},{"url":"https://bugzilla.suse.com/1246430","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6442","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-27220","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7442-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-35176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-39908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-41123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-43398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-25186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49761","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-27220","description":"In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.","status":"published","published":"2025-03-03T00:00:00Z","modified":"2025-11-03T21:13:25.25Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-1333"],"updated_at":"2026-11-02T14:32:42.751171Z"}],"euvd":[{"id":"EUVD-2025-5509","description":"In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.","status":"published","published":"2025-03-03T00:00:00Z","modified":"2025-11-03T21:13:25Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T19:49:31.7352Z"}],"ghsa":[{"id":"GHSA-mhwm-jh88-3gjf","title":"CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement","description":"There is a possibility for Regular expression Denial of Service (ReDoS) by in the cgi gem. This vulnerability has been assigned the CVE identifier CVE-2025-27220. We recommend upgrading the cgi gem.\n\n## Details\n\nThe regular expression used in `CGI::Util#escapeElement` is vulnerable to ReDoS. The crafted input could lead to a high CPU consumption.\n\nThis vulnerability only affects Ruby 3.1 and 3.2. If you are using these versions, please update CGI gem to version 0.3.5.1, 0.3.7, 0.4.2 or later.\n\n## Affected versions\n\ncgi gem versions \u003c= 0.3.5, 0.3.6, 0.4.0 and 0.4.1.\n\n## Credits\n\nThanks to svalkanov for discovering this issue.\nAlso thanks to nobu for fixing this vulnerability.","status":"published","published":"2025-03-03T22:05:08Z","modified":"2025-11-04T00:33:26Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"},{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-1333"],"updated_at":"2026-11-02T14:39:05.278442Z"}],"nvd":[{"id":"CVE-2025-27220","description":"In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.","status":"published","published":"2025-03-04T00:15:31.693Z","modified":"2026-06-17T09:03:14.26Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-1333"],"updated_at":"2026-11-02T14:10:53.101324Z"}],"osv":[{"id":"AZL-57791","title":"CVE-2025-27220 affecting package ruby for versions less than 3.1.4-9","description":"In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.","status":"published","published":"2025-03-04T00:15:31Z","modified":"2026-04-21T04:37:00.890742Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57938","title":"CVE-2025-27220 affecting package ruby for versions less than 3.3.5-3","description":"In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.","status":"published","published":"2025-03-04T00:15:31Z","modified":"2026-10-31T15:02:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"CVE-2025-27220","description":"In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.","status":"published","published":"2025-03-03T00:00:00Z","modified":"2026-10-28T02:31:13.567875861Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-1333"],"updated_at":"2026-11-02T15:44:47.386092Z"},{"id":"DEBIAN-CVE-2025-27220","description":"In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.","status":"published","published":"2025-03-04T00:15:31.693Z","modified":"2026-09-01T20:05:45.097679945Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"GHSA-mhwm-jh88-3gjf","title":"CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement","description":"There is a possibility for Regular expression Denial of Service (ReDoS) by in the cgi gem. This vulnerability has been assigned the CVE identifier CVE-2025-27220. We recommend upgrading the cgi gem.\n\n## Details\n\nThe regular expression used in `CGI::Util#escapeElement` is vulnerable to ReDoS. The crafted input could lead to a high CPU consumption.\n\nThis vulnerability only affects Ruby 3.1 and 3.2. If you are using these versions, please update CGI gem to version 0.3.5.1, 0.3.7, 0.4.2 or later.\n\n## Affected versions\n\ncgi gem versions \u003c= 0.3.5, 0.3.6, 0.4.0 and 0.4.1.\n\n## Credits\n\nThanks to svalkanov for discovering this issue.\nAlso thanks to nobu for fixing this vulnerability.","status":"published","published":"2025-03-03T22:05:08Z","modified":"2026-09-10T03:50:56.878678947Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium"},{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-1333"],"updated_at":"2026-11-02T15:46:51.811331Z"},{"id":"OESA-2025-1244","title":"ruby security update","description":"Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).\r\n\r\nSecurity Fix(es):\n\nIn the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.(CVE-2025-27219)\n\nIn the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.(CVE-2025-27220)\n\nIn the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.(CVE-2025-27221)","status":"published","published":"2025-03-07T11:08:20Z","modified":"2026-08-18T01:17:43.854672434Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1261","title":"ruby security update","description":"Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).\r\n\r\nSecurity Fix(es):\n\nIn the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.(CVE-2025-27219)\n\nIn the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.(CVE-2025-27220)\n\nIn the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.(CVE-2025-27221)","status":"published","published":"2025-03-14T11:08:21Z","modified":"2026-08-18T01:18:48.800973961Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1262","title":"ruby security update","description":"Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).\r\n\r\nSecurity Fix(es):\n\nIn the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.(CVE-2025-27219)\n\nIn the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.(CVE-2025-27220)\n\nIn the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.(CVE-2025-27221)","status":"published","published":"2025-03-14T11:08:21Z","modified":"2026-08-18T01:18:48.77632376Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1263","title":"ruby security update","description":"Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).\r\n\r\nSecurity Fix(es):\n\nIn the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.(CVE-2025-27219)\n\nIn the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.(CVE-2025-27220)\n\nIn the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.(CVE-2025-27221)","status":"published","published":"2025-03-14T11:08:21Z","modified":"2026-08-18T01:17:49.53381592Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1264","title":"ruby security update","description":"Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).\r\n\r\nSecurity Fix(es):\n\nIn the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.(CVE-2025-27219)\n\nIn the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.(CVE-2025-27220)\n\nIn the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.(CVE-2025-27221)","status":"published","published":"2025-03-14T11:08:21Z","modified":"2026-08-18T01:18:48.772812266Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"RHSA-2025:4063","title":"Red Hat Security Advisory: ruby:3.1 security update","status":"published","published":"2025-04-24T10:03:53Z","modified":"2026-10-14T10:10:20Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4487","title":"Red Hat Security Advisory: ruby security update","status":"published","published":"2025-05-06T10:03:59Z","modified":"2026-06-30T10:27:21Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4488","title":"Red Hat Security Advisory: ruby:3.1 security update","status":"published","published":"2025-05-06T10:04:00Z","modified":"2026-10-14T10:10:27Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RLSA-2025:4063","title":"Moderate: ruby:3.1 security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* rexml: DoS vulnerability in REXML (CVE-2024-39908)\n\n* rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, \u003e] and ]\u003e (CVE-2024-41123)\n\n* rexml: DoS vulnerability in REXML (CVE-2024-41946)\n\n* rexml: DoS vulnerability in REXML (CVE-2024-43398)\n\n* CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220)\n\n* CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219)\n\n* uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T14:33:20.352051Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:4487","title":"Moderate: ruby security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220)\n\n* CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:40:15.757295Z","modified":"2025-10-07T17:39:20.903624Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:4488","title":"Moderate: ruby:3.1 security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* rexml: DoS vulnerability in REXML (CVE-2024-39908)\n\n* rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, \u003e] and ]\u003e (CVE-2024-41123)\n\n* rexml: DoS vulnerability in REXML (CVE-2024-41946)\n\n* rexml: DoS vulnerability in REXML (CVE-2024-43398)\n\n* CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220)\n\n* CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219)\n\n* uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:40:19.644888Z","modified":"2025-07-29T14:33:20.415099Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2025-27220","description":"In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.","status":"published","published":"2025-03-04T00:15:00Z","modified":"2026-10-17T12:57:26.644355823Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"ALSA-2025:4063","title":"Moderate: ruby:3.1 security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  \n\nSecurity Fix(es):  \n\n  * rexml: DoS vulnerability in REXML (CVE-2024-39908)\n  * rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, \u003e] and ]\u003e (CVE-2024-41123)\n  * rexml: DoS vulnerability in REXML (CVE-2024-41946)\n  * rexml: DoS vulnerability in REXML (CVE-2024-43398)\n  * CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220)\n  * CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219)\n  * uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-04-22T00:00:00Z","modified":"2026-10-29T11:02:22.990083795Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:4488","title":"Moderate: ruby:3.1 security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  \n\nSecurity Fix(es):  \n\n  * rexml: DoS vulnerability in REXML (CVE-2024-39908)\n  * rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, \u003e] and ]\u003e (CVE-2024-41123)\n  * rexml: DoS vulnerability in REXML (CVE-2024-41946)\n  * rexml: DoS vulnerability in REXML (CVE-2024-43398)\n  * CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220)\n  * CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219)\n  * uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-06T00:00:00Z","modified":"2026-10-29T11:32:06.003792666Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"CLSA-2025-1745585192","title":"ruby: Fix of 3 CVEs","description":"- CVE-2025-27219: fix a potential Denial of Service (DoS) vulnerability in\n  cookie parsing\n- CVE-2025-27220: fix ReDoS vulnerability exists in the escapeElement\n  method\n- CVE-2025-27221: fix he URI handling methods (URI.join, URI#merge, URI#+)","status":"published","published":"2025-04-25T12:46:37Z","modified":"2026-06-01T00:32:50.863287516Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"DLA-4082-1","title":"ruby2.7 - security update","status":"published","published":"2025-03-10T00:00:00Z","modified":"2026-03-09T01:18:37.066083Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0290","title":"Updated ruby packages fix security vulnerabilities","description":"Net::IMAP vulnerable to possible DoS by memory exhaustion.\n(CVE-2025-25186)\nIn the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in\nthe CGI library contains a potential Denial of Service (DoS)\nvulnerability. The method does not impose any limit on the length of the\nraw cookie value it processes. This oversight can lead to excessive\nresource consumption when parsing extremely large cookies.\n(CVE-2025-27219)\nIn the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of\nService (ReDoS) vulnerability exists in the Util#escapeElement method.\n(CVE-2025-27220)\nIn the URI gem before 1.0.3 for Ruby, the URI handling methods\n(URI.join, URI#merge, URI#+) have an inadvertent leakage of\nauthentication credentials because userinfo is retained even after\nchanging the host. (CVE-2025-27221)\n","status":"published","published":"2025-11-13T23:37:22Z","modified":"2026-04-16T04:44:45.047201304Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"SUSE-SU-2025:1369-1","title":"Security update for ruby2.5","description":"This update for ruby2.5 fixes the following issues:\n\n- CVE-2025-27219: Fixed denial of service in CGI::Cookie.parse (bsc#1237804)    \n- CVE-2025-27220: Fixed ReDoS in CGI::Util#escapeElement (bsc#1237806)\n \nOther fixes:\n- Improved fix for CVE-2024-47220 (bsc#1230930, bsc#1235773) \n","status":"published","published":"2025-04-24T17:11:21Z","modified":"2026-02-04T02:57:47.383126Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:4264-1","title":"Security update for ruby2.5","description":"This update for ruby2.5 fixes the following issues:\n\n- CVE-2024-35221: Fixed remote DoS via YAML manifest (bsc#1225905)\n- CVE-2024-47220: Fixed HTTP request smuggling in WEBrick (bsc#1230930)\n- CVE-2024-49761: Fixed ReDOS vulnerability by updating REXML to 3.3.9 (bsc#1232440)\n- CVE-2025-24294: Fixed denial of service (DoS) caused by an insufficient check on the length \n  of a decompressed domain name within a DNS packet in resolv gem (bsc#1246430)\n- CVE-2025-27219: Fixed denial of service in CGI::Cookie.parse (bsc#1237804)\n- CVE-2025-27220: Fixed ReDoS in CGI::Util#escapeElement (bsc#1237806)\n- CVE-2025-27221: Fixed userinfo leakage in URI#join, URI#merge and URI#+ (bsc#1237805)\n- CVE-2025-6442: Fixed ruby WEBrick read_header HTTP request smuggling vulnerability (bsc#1245254)\n","status":"published","published":"2025-11-26T15:52:44Z","modified":"2026-03-23T04:51:29.7996Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"USN-7418-1","title":"ruby2.7, ruby3.0, ruby3.2, ruby3.3 vulnerabilities","description":"It was discovered that Ruby incorrectly handled parsing of an XML document\nthat has specific XML characters in an attribute value using REXML gem. An\nattacker could use this issue to cause Ruby to crash, resulting in a\ndenial of service. This issue only affected in Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, and Ubuntu 24.10. (CVE-2024-35176, CVE-2024-39908,\nCVE-2024-41123, CVE-2024-43398)\n\nIt was discovered that Ruby incorrectly handled expanding ranges in the\nnet-imap response parser. If a user or automated system were tricked into\nconnecting to a malicious IMAP server, a remote attacker could possibly use\nthis issue to consume memory, leading to a denial of service. This issue\nonly affected Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2025-25186)\n\nIt was discovered that the Ruby CGI gem incorrectly handled parsing certain\ncookies. A remote attacker could possibly use this issue to consume\nresources, leading to a denial of service. (CVE-2025-27219)\n\nIt was discovered that the Ruby CGI gem incorrectly handled parsing certain\nregular expressions. A remote attacker could possibly use this issue to\nconsume resources, leading to a denial of service. (CVE-2025-27220)\n\nIt was discovered that the Ruby URI gem incorrectly handled certain URI\nhandling methods. A remote attacker could possibly use this issue to leak\nauthentication credentials. (CVE-2025-27221)\n","status":"published","published":"2025-04-07T13:55:18Z","modified":"2026-04-27T18:02:26.605127452Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7442-1","title":"ruby2.3, ruby2.5 vulnerabilities","description":"It was discovered that the Ruby CGI gem incorrectly handled parsing certain\ncookies. A remote attacker could possibly use this issue to consume\nresources, leading to a denial of service. (CVE-2025-27219)\n\nIt was discovered that the Ruby CGI gem incorrectly handled parsing certain\nregular expressions. A remote attacker could possibly use this issue to\nconsume resources, leading to a denial of service. (CVE-2025-27220)\n\nIt was discovered that the Ruby URI gem incorrectly handled certain URI\nhandling methods. A remote attacker could possibly use this issue to leak\nauthentication credentials. (CVE-2025-27221)\n\nIt was discovered that the Ruby REXML gem incorrectly handled parsing XML\ndocuments containing many digits in a hex numeric character reference. A\nremote attacker could use this issue to consume resources, leading to a\ndenial of service. (CVE-2024-49761)\n","status":"published","published":"2025-04-17T12:51:31Z","modified":"2026-06-25T13:32:30.322528245Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}