{"id":"CVE-2025-61594","aliases":["ALPINE-CVE-2025-61594","ALSA-2025:23062","ALSA-2025:23063","ALSA-2025:23141","AZL-73356","AZL-73391","BELL-CVE-2025-61594","CLSA-2026-1768839607","CLSA-2026-1769511237","DEBIAN-CVE-2025-61594","EUVD-2025-205858","GHSA-j4pr-3wm6-xx2r","OESA-2025-2655","RHSA-2025:23062","RHSA-2025:23063","RHSA-2025:23141","RLSA-2025:23062","RLSA-2025:23063","RLSA-2025:23141","SUSE-SU-2026:3090-1","UBUNTU-CVE-2025-61594","USN-8137-1","openSUSE-SU-2025:15614-1","openSUSE-SU-2026:11204-1","openSUSE-SU-2026:21878-1"],"status":"published","title":"URI Credential Leakage Bypass over CVE-2025-27221","description":"URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure. This is a a bypass for the fix to CVE-2025-27221 that can expose user credentials. This issue has been fixed in versions 0.12.5, 0.13.3 and 1.0.4.","severity":{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0056,"percentile":0.46858,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-212"],"published":"2025-10-08T00:00:00Z","modified":"2026-11-07T19:00:42Z","fixes":[{"ecosystem":"RubyGems","package":"uri","fixed_in":["0.12.5","0.13.3","1.0.4"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.20","package":"ruby","fixed_in":["3.3.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ruby","fixed_in":["3.3.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ruby","fixed_in":["3.4.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ruby","fixed_in":["3.4.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ruby","fixed_in":["3.4.7-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"ruby","fixed_in":["3.3.5-7"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"ruby","fixed_in":["3.1.7-4"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"ruby","fixed_in":["3.1.5-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"ruby","fixed_in":["3.4.7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"ruby","fixed_in":["3.4.7-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ruby3.3","fixed_in":["3.3.13-0+deb13u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ruby2.3","fixed_in":["2.3.1-2~ubuntu16.04.16+esm12"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ruby2.5","fixed_in":["2.5.1-1ubuntu1.16+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ruby2.7","fixed_in":["2.7.0-5ubuntu1.18+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ruby3.0","fixed_in":["3.0.2-7ubuntu2.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ruby3.2","fixed_in":["3.2.3-1ubuntu0.24.04.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"ruby3.3","fixed_in":["3.3.8-2ubuntu2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ruby3.4","fixed_in":["3.4.7-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rubygem-uri","fixed_in":["1.1.1-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"uri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.5"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"uri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.13.0"},{"fixed":"0.13.3"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"uri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.7-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-1.module_el8.10.0+3799+191214cc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-1.module_el8.10.0+3799+191214cc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.22-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.2-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.20.0-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-1.module_el8.10.0+3799+191214cc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-1.module_el8.10.0+3799+191214cc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.module_el8.10.0+3799+191214cc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.module_el8.10.0+3799+191214cc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.1.0-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3.1-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.9-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-5.module_el8.10.0+4075+e5f6dad1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.22-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.2-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.20.0-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-3.module_el9.7.0+184+e2e36072"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-3.module_el9.7.0+184+e2e36072"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.module_el9.4.0+75+1a8fe981"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.module_el9.4.0+75+1a8fe981"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.1.0-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3.1-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.9-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-5.module_el9.7.0+193+58179166"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.22-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.20.0-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.1.0-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3.1-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.9-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.22-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:3","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.5-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.7-4"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.2-r1"},{"fixed":"3.1.5-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.4.4-r0"},{"fixed":"3.4.7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.4.4-r0"},{"fixed":"3.4.7-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.33-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.7-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.2-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.3-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.4.1-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.9-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.2-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.33-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.33-165.el9_5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.33-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.7-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.2-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.3-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.3-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.9-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.2-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.33-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.33-160.el9_0.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"ruby3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2-7","3.1.2-7+deb12u1","3.1.2-7+hurd.1","3.1.2-8","3.1.2-8.1~exp1","3.1.2-8.3","3.1.2-8.4","3.1.2-8.5"]},{"source":"osv","ecosystem":"Debian:13","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.13-0+deb13u1"}]}],"versions":["3.3.8-2","3.3.8-2.1","3.3.8-2.2"]},{"source":"osv","ecosystem":"Debian:14","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.8-2","3.3.8-2.1","3.3.8-2.2"]},{"source":"osv","ecosystem":"Debian:12","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.15-2","3.3.15-2+deb12u1","3.4.20-1","3.4.20-1~0","3.6.3-1","3.6.6-1","3.6.7-1","3.6.7-2","3.6.7-3~exp1","4.0.15-1","4.0.15-2","4.0.18-1","4.0.20-1","4.0.22-1"]},{"source":"osv","ecosystem":"Debian:13","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.7-2","3.6.7-3~exp1","4.0.15-1","4.0.15-2","4.0.18-1","4.0.20-1","4.0.22-1"]},{"source":"osv","ecosystem":"Debian:14","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.7-2","3.6.7-3~exp1","4.0.15-1","4.0.15-2","4.0.18-1","4.0.20-1","4.0.22-1"]},{"source":"osv","ecosystem":"RubyGems","package":"uri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.5"}]}],"versions":["0.10.0","0.10.0.1","0.10.0.2","0.10.0.3","0.10.1","0.10.2","0.10.3","0.11.0","0.11.1","0.11.2","0.11.3","0.12.0","0.12.1","0.12.2","0.12.3","0.12.4"]},{"source":"osv","ecosystem":"RubyGems","package":"uri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.13.0"},{"fixed":"0.13.3"}]}],"versions":["0.13.0","0.13.1","0.13.2"]},{"source":"osv","ecosystem":"RubyGems","package":"uri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-144.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-144.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-151.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-151.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-151.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.8-136.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-bundled-gems-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-abrt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.22-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.20.0-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el8.10.0+21226+b78a28c4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.2-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.2-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-racc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.1.0-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rbs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.3.1-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.4-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.1-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.9-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.22-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.22-5.module+el8.10.0+23696+c42b0f57"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-bundled-gems-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.22-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.20.0-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-3.module+el9.7.0+23362+7018fe7e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-3.module+el9.7.0+23362+7018fe7e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-3.module+el9.7.0+23362+7018fe7e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-mysql2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-3.module+el9.7.0+23362+7018fe7e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el9.4.0+21222+faeeed2f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el9.4.0+21222+faeeed2f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el9.4.0+21222+faeeed2f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-pg-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el9.4.0+21222+faeeed2f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.2-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.2-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-racc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.1.0-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rbs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.3.1-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.4-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.1-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.9-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.22-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.22-5.module+el9.7.0+23651+15dc1615"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ruby-bundled-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ruby-bundled-gems-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ruby-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ruby-default-gems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ruby-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-bigdecimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.22-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-io-console-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.2-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.20.0-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-power_assert","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.2-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-psych-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.2-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-racc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-racc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.1.0-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-rbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-rbs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.3.1-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-rexml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.4-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-rss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.1-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-test-unit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.1-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygem-typeprof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21.9-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.22-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.22-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el8.10.0+40038+e29e4152"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1827+16ecb9d2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.5.0+668+665814fa"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1679+61871737"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.9.0+1537+0b2034bd"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1820+f3fffb92"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-abrt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.module+el8.10.0+1826+b62220b4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-1.module+el8.10.0+1679+61871737"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-1.module+el8.10.0+1827+16ecb9d2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el8.10.0+1679+61871737"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el8.10.0+1827+16ecb9d2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-5.module+el9.7.0+40039+300ba1ed"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rubygem-mysql2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.5-3.module+el9.7.0+40032+36e56d0d"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.module+el9.7.0+40032+36e56d0d.0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:10","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.10-11.el10_1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"ruby3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-150700.3.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"ruby3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-150700.3.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.16+esm12"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2","2.3.1-2~16.04.4","2.3.1-2~16.04.5","2.3.1-2~16.04.6","2.3.1-2~16.04.7","2.3.1-2~16.04.9","2.3.1-2~16.04.10","2.3.1-2~16.04.11","2.3.1-2~16.04.12","2.3.1-2~ubuntu16.04.13","2.3.1-2~ubuntu16.04.14","2.3.1-2~ubuntu16.04.15","2.3.1-2~ubuntu16.04.16","2.3.1-2~ubuntu16.04.16+esm1","2.3.1-2~ubuntu16.04.16+esm2","2.3.1-2~ubuntu16.04.16+esm3","2.3.1-2~ubuntu16.04.16+esm4","2.3.1-2~ubuntu16.04.16+esm5","2.3.1-2~ubuntu16.04.16+esm6","2.3.1-2~ubuntu16.04.16+esm7","2.3.1-2~ubuntu16.04.16+esm8","2.3.1-2~ubuntu16.04.16+esm9","2.3.1-2~ubuntu16.04.16+esm10","2.3.1-2~ubuntu16.04.16+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-1ubuntu1.16+esm7"}]}],"versions":["2.5.0~preview1-1ubuntu2","2.5.0-4ubuntu1","2.5.0-4ubuntu4","2.5.0-5ubuntu1","2.5.0-6ubuntu1","2.5.1-1ubuntu1","2.5.1-1ubuntu1.1","2.5.1-1ubuntu1.2","2.5.1-1ubuntu1.4","2.5.1-1ubuntu1.5","2.5.1-1ubuntu1.6","2.5.1-1ubuntu1.7","2.5.1-1ubuntu1.8","2.5.1-1ubuntu1.9","2.5.1-1ubuntu1.10","2.5.1-1ubuntu1.11","2.5.1-1ubuntu1.12","2.5.1-1ubuntu1.13","2.5.1-1ubuntu1.14","2.5.1-1ubuntu1.15","2.5.1-1ubuntu1.16","2.5.1-1ubuntu1.16+esm1","2.5.1-1ubuntu1.16+esm3","2.5.1-1ubuntu1.16+esm4","2.5.1-1ubuntu1.16+esm5","2.5.1-1ubuntu1.16+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ruby2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-5ubuntu1.18+esm4"}]}],"versions":["2.7.0-1","2.7.0-2","2.7.0-3","2.7.0-4","2.7.0-4ubuntu1","2.7.0-5ubuntu1","2.7.0-5ubuntu1.1","2.7.0-5ubuntu1.2","2.7.0-5ubuntu1.3","2.7.0-5ubuntu1.4","2.7.0-5ubuntu1.5","2.7.0-5ubuntu1.6","2.7.0-5ubuntu1.7","2.7.0-5ubuntu1.8","2.7.0-5ubuntu1.9","2.7.0-5ubuntu1.10","2.7.0-5ubuntu1.11","2.7.0-5ubuntu1.12","2.7.0-5ubuntu1.13","2.7.0-5ubuntu1.14","2.7.0-5ubuntu1.15","2.7.0-5ubuntu1.16","2.7.0-5ubuntu1.17","2.7.0-5ubuntu1.18","2.7.0-5ubuntu1.18+esm1","2.7.0-5ubuntu1.18+esm3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ruby3.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-7ubuntu2.12"}]}],"versions":["3.0.2-5ubuntu1","3.0.2-7","3.0.2-7ubuntu2","3.0.2-7ubuntu2.1","3.0.2-7ubuntu2.2","3.0.2-7ubuntu2.3","3.0.2-7ubuntu2.4","3.0.2-7ubuntu2.5","3.0.2-7ubuntu2.6","3.0.2-7ubuntu2.7","3.0.2-7ubuntu2.8","3.0.2-7ubuntu2.10","3.0.2-7ubuntu2.11"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ruby3.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-1ubuntu0.24.04.7"}]}],"versions":["3.2.3-1","3.2.3-1build2","3.2.3-1build3","3.2.3-1ubuntu0.24.04.1","3.2.3-1ubuntu0.24.04.3","3.2.3-1ubuntu0.24.04.5","3.2.3-1ubuntu0.24.04.6"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.8-2ubuntu2.1"}]}],"versions":["3.3.7-1ubuntu2","3.3.8-2ubuntu1","3.3.8-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.8-2ubuntu3","3.3.8-2.2ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.8-2ubuntu2","3.3.8-2ubuntu3","3.3.8-2ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ruby2.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-2~ubuntu16.04.16+esm12"}]}],"versions":["2.3.0-1","2.3.0-2","2.3.0-4ubuntu2","2.3.0-4ubuntu3","2.3.0-5ubuntu1","2.3.1-2~16.04","2.3.1-2~16.04.2","2.3.1-2~16.04.4","2.3.1-2~16.04.5","2.3.1-2~16.04.6","2.3.1-2~16.04.7","2.3.1-2~16.04.9","2.3.1-2~16.04.10","2.3.1-2~16.04.11","2.3.1-2~16.04.12","2.3.1-2~ubuntu16.04.13","2.3.1-2~ubuntu16.04.14","2.3.1-2~ubuntu16.04.15","2.3.1-2~ubuntu16.04.16","2.3.1-2~ubuntu16.04.16+esm1","2.3.1-2~ubuntu16.04.16+esm2","2.3.1-2~ubuntu16.04.16+esm3","2.3.1-2~ubuntu16.04.16+esm4","2.3.1-2~ubuntu16.04.16+esm5","2.3.1-2~ubuntu16.04.16+esm6","2.3.1-2~ubuntu16.04.16+esm7","2.3.1-2~ubuntu16.04.16+esm8","2.3.1-2~ubuntu16.04.16+esm9","2.3.1-2~ubuntu16.04.16+esm10","2.3.1-2~ubuntu16.04.16+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-1ubuntu1.16+esm7"}]}],"versions":["2.5.0~preview1-1ubuntu2","2.5.0-4ubuntu1","2.5.0-4ubuntu4","2.5.0-5ubuntu1","2.5.0-6ubuntu1","2.5.1-1ubuntu1","2.5.1-1ubuntu1.1","2.5.1-1ubuntu1.2","2.5.1-1ubuntu1.4","2.5.1-1ubuntu1.5","2.5.1-1ubuntu1.6","2.5.1-1ubuntu1.7","2.5.1-1ubuntu1.8","2.5.1-1ubuntu1.9","2.5.1-1ubuntu1.10","2.5.1-1ubuntu1.11","2.5.1-1ubuntu1.12","2.5.1-1ubuntu1.13","2.5.1-1ubuntu1.14","2.5.1-1ubuntu1.15","2.5.1-1ubuntu1.16","2.5.1-1ubuntu1.16+esm1","2.5.1-1ubuntu1.16+esm3","2.5.1-1ubuntu1.16+esm4","2.5.1-1ubuntu1.16+esm5","2.5.1-1ubuntu1.16+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ruby2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-5ubuntu1.18+esm4"}]}],"versions":["2.7.0-1","2.7.0-2","2.7.0-3","2.7.0-4","2.7.0-4ubuntu1","2.7.0-5ubuntu1","2.7.0-5ubuntu1.1","2.7.0-5ubuntu1.2","2.7.0-5ubuntu1.3","2.7.0-5ubuntu1.4","2.7.0-5ubuntu1.5","2.7.0-5ubuntu1.6","2.7.0-5ubuntu1.7","2.7.0-5ubuntu1.8","2.7.0-5ubuntu1.9","2.7.0-5ubuntu1.10","2.7.0-5ubuntu1.11","2.7.0-5ubuntu1.12","2.7.0-5ubuntu1.13","2.7.0-5ubuntu1.14","2.7.0-5ubuntu1.15","2.7.0-5ubuntu1.16","2.7.0-5ubuntu1.17","2.7.0-5ubuntu1.18","2.7.0-5ubuntu1.18+esm1","2.7.0-5ubuntu1.18+esm3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ruby3.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-7ubuntu2.12"}]}],"versions":["3.0.2-5ubuntu1","3.0.2-7","3.0.2-7ubuntu2","3.0.2-7ubuntu2.1","3.0.2-7ubuntu2.2","3.0.2-7ubuntu2.3","3.0.2-7ubuntu2.4","3.0.2-7ubuntu2.5","3.0.2-7ubuntu2.6","3.0.2-7ubuntu2.7","3.0.2-7ubuntu2.8","3.0.2-7ubuntu2.10","3.0.2-7ubuntu2.11"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ruby3.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-1ubuntu0.24.04.7"}]}],"versions":["3.2.3-1","3.2.3-1build2","3.2.3-1build3","3.2.3-1ubuntu0.24.04.1","3.2.3-1ubuntu0.24.04.3","3.2.3-1ubuntu0.24.04.5","3.2.3-1ubuntu0.24.04.6"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ruby3.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.8-2ubuntu2.1"}]}],"versions":["3.3.7-1ubuntu2","3.3.8-2ubuntu1","3.3.8-2ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ruby3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.7-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-uri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"ruby3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-160000.1.1"}]}],"bundled":8}],"products":[{"vendor":"ruby","product":"uri"},{"vendor":"ruby-lang","product":"uri"}],"references":[{"url":"https://github.com/ruby/uri/security/advisories/GHSA-j4pr-3wm6-xx2r","tags":["x_refsource_CONFIRM","advisory","web"]},{"url":"https://hackerone.com/reports/2957667","tags":["x_refsource_MISC","web"]},{"url":"https://github.com/advisories/GHSA-22h5-pq3x-2gf2","tags":["x_refsource_MISC","advisory"]},{"url":"https://www.ruby-lang.org/en/news/2025/02/26/security-advisories","tags":["x_refsource_MISC","advisory","web"]},{"url":"https://github.com/ruby/uri/commit/20157e3e29b125ff41f1d9662e2e3b1d066f5902","tags":["web","article","report"]},{"url":"https://github.com/ruby/uri/commit/7e521b2da0833d964aab43019e735aea674e1c2c","tags":["web","article","report"]},{"url":"https://github.com/ruby/uri/commit/d3116ca66a3b1c97dc7577f9d2d6e353f391cd6a","tags":["web","article","report"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2025-61594.yml","tags":["web","article","report"]},{"url":"https://www.ruby-lang.org/en/news/2025/10/07/uri-cve-2025-61594","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61594","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-j4pr-3wm6-xx2r"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-61594","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23062","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24294","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-58767","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61594","tags":["report"]},{"url":"https://bugzilla.redhat.com/2379684","tags":["report"]},{"url":"https://bugzilla.redhat.com/2396186","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-23062.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23063","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-23063.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23141","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-23141.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-61594","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1768839607.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1769511237.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61594.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-61594","tags":["advisory"]},{"url":"https://github.com/ruby/uri","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2655","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58767","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2396186","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-106820","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23062.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24294","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24294","tags":["advisory"]},{"url":"https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58767","tags":["advisory"]},{"url":"https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23","tags":["article"]},{"url":"https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2426336","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61594","tags":["advisory","report"]},{"url":"https://www.ruby-lang.org/en/news/2025/10/07/uri-cve-2025-61594/","tags":["article","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23063.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23141.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:23062","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:23063","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:23141","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263090-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268011","tags":["report"]},{"url":"https://bugzilla.suse.com/1268337","tags":["report"]},{"url":"https://bugzilla.suse.com/1268338","tags":["report"]},{"url":"https://bugzilla.suse.com/1268339","tags":["report"]},{"url":"https://bugzilla.suse.com/1270034","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47242","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-61594","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8137-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1250016","tags":["report"]},{"url":"https://bugzilla.suse.com/1255833","tags":["report"]},{"url":"https://bugzilla.suse.com/1259239","tags":["report"]},{"url":"https://bugzilla.suse.com/1262441","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41316","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-61594","title":"URI Credential Leakage Bypass over CVE-2025-27221","description":"URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure. This is a a bypass for the fix to CVE-2025-27221 that can expose user credentials. This issue has been fixed in versions 0.12.5, 0.13.3 and 1.0.4.","status":"published","published":"2025-12-30T21:03:08.99Z","modified":"2026-04-16T17:02:32.149Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N","level":"low","assessor":"cna"}],"cwes":["CWE-200","CWE-212"],"updated_at":"2026-11-02T14:32:45.105469Z"}],"euvd":[{"id":"EUVD-2025-205858","description":"URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure. This is a a bypass for the fix to CVE-2025-27221 that can expose user credentials. This issue has been fixed in versions 0.12.5, 0.13.3 and 1.0.4.","status":"published","published":"2025-12-30T21:03:08Z","modified":"2026-04-16T17:02:32Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N","level":"low"}],"updated_at":"2026-11-02T19:24:23.841547Z"}],"ghsa":[{"id":"GHSA-j4pr-3wm6-xx2r","title":"URI Credential Leakage Bypass over CVE-2025-27221","description":"### Impact\n\nIn affected URI version, a bypass exists for the fix to CVE-2025-27221 that can expose user credentials.\n\nWhen using the `+` operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure.\n\nThe vulnerability affects the `uri` gem bundled with the following Ruby series:\n\n* 0.12.4 and earlier (bundled in Ruby 3.2 series)\n* 0.13.2 and earlier (bundled in Ruby 3.3 series)\n* 1.0.3 and earlier (bundled in Ruby 3.4 series)\n\n### Patches\n\nUpgrade to 0.12.5, 0.13.3 or 1.0.4\n\n### References\n\n* https://www.ruby-lang.org/en/news/2025/02/26/security-advisories/\n* https://hackerone.com/reports/2957667","status":"published","published":"2025-12-30T21:07:14Z","modified":"2026-04-24T13:42:05Z","cvss":[{"version":"4.0","score":2.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U","level":"low"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200","CWE-212"],"updated_at":"2026-11-02T14:39:56.453138Z"}],"nvd":[{"id":"CVE-2025-61594","description":"URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure. This is a a bypass for the fix to CVE-2025-27221 that can expose user credentials. This issue has been fixed in versions 0.12.5, 0.13.3 and 1.0.4.","status":"published","published":"2025-12-30T21:15:43.893Z","modified":"2026-06-17T09:50:37.197Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-200","CWE-212"],"updated_at":"2026-11-02T14:11:54.323368Z"}],"osv":[{"id":"ALPINE-CVE-2025-61594","description":"URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure. This is a a bypass for the fix to CVE-2025-27221 that can expose user credentials. This issue has been fixed in versions 0.12.5, 0.13.3 and 1.0.4.","status":"published","published":"2025-12-30T21:15:43.893Z","modified":"2026-10-27T12:30:03.166599236Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2025-61594","status":"published","published":"2025-11-27T13:27:45.27291Z","modified":"2026-02-26T07:15:24.235977Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-61594","title":"URI Credential Leakage Bypass over CVE-2025-27221","description":"URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure. This is a a bypass for the fix to CVE-2025-27221 that can expose user credentials. This issue has been fixed in versions 0.12.5, 0.13.3 and 1.0.4.","status":"published","published":"2025-12-30T21:03:08.99Z","modified":"2026-10-29T11:42:18.761269244Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N","level":"low"}],"cwes":["CWE-200","CWE-212"],"updated_at":"2026-11-02T15:44:51.516975Z"},{"id":"DEBIAN-CVE-2025-61594","description":"URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure. This is a a bypass for the fix to CVE-2025-27221 that can expose user credentials. This issue has been fixed in versions 0.12.5, 0.13.3 and 1.0.4.","status":"published","published":"2025-12-30T21:15:43.893Z","modified":"2026-11-07T19:00:42.311795285Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-07T19:21:34.633914Z"},{"id":"GHSA-j4pr-3wm6-xx2r","title":"URI Credential Leakage Bypass over CVE-2025-27221","description":"### Impact\n\nIn affected URI version, a bypass exists for the fix to CVE-2025-27221 that can expose user credentials.\n\nWhen using the `+` operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure.\n\nThe vulnerability affects the `uri` gem bundled with the following Ruby series:\n\n* 0.12.4 and earlier (bundled in Ruby 3.2 series)\n* 0.13.2 and earlier (bundled in Ruby 3.3 series)\n* 1.0.3 and earlier (bundled in Ruby 3.4 series)\n\n### Patches\n\nUpgrade to 0.12.5, 0.13.3 or 1.0.4\n\n### References\n\n* https://www.ruby-lang.org/en/news/2025/02/26/security-advisories/\n* https://hackerone.com/reports/2957667","status":"published","published":"2025-12-30T21:07:14Z","modified":"2026-09-10T03:50:58.735046368Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"},{"version":"4.0","score":2.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U","level":"low"}],"cwes":["CWE-200","CWE-212"],"updated_at":"2026-11-02T15:46:49.977351Z"},{"id":"OESA-2025-2655","title":"ruby security update","description":"Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl).\r\n\r\nSecurity Fix(es):\n\nREXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.(CVE-2025-58767)\n\nAffected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer via the use of the `+` operator when combining URIs. An attacker can obtain sensitive user credentials by crafting a URI that, when merged with another, results in the unintended exposure of authentication information.\n\n**Note:** This vulnerability is a bypass of the fix to CVE-2025-27221.(CVE-2025-61594)","status":"published","published":"2025-11-14T11:09:46Z","modified":"2026-08-18T01:19:19.719620545Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"RHSA-2025:23062","title":"Red Hat Security Advisory: ruby:3.3 security update","status":"published","published":"2026-01-03T10:03:50Z","modified":"2026-10-14T10:09:13Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:23063","title":"Red Hat Security Advisory: ruby:3.3 security update","status":"published","published":"2026-01-03T10:03:50Z","modified":"2026-10-14T10:09:14Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:23141","title":"Red Hat Security Advisory: ruby security update","status":"published","published":"2026-01-03T10:03:51Z","modified":"2026-10-14T10:09:17Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RLSA-2025:23062","title":"Moderate: ruby:3.3 security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* resolv: Denial of Service in resolv gem (CVE-2025-24294)\n\n* rexml: REXML denial of service (CVE-2025-58767)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-01-03T09:01:59.265785Z","modified":"2026-01-03T09:29:57.168451Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:23063","title":"Moderate: ruby:3.3 security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* resolv: Denial of Service in resolv gem (CVE-2025-24294)\n\n* rexml: REXML denial of service (CVE-2025-58767)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-01-03T09:05:04.646718Z","modified":"2026-01-03T09:29:57.016298Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:23141","title":"Moderate: ruby security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* resolv: Denial of Service in resolv gem (CVE-2025-24294)\n\n* rexml: REXML denial of service (CVE-2025-58767)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-01-03T09:07:36.554807Z","modified":"2026-01-03T09:29:57.281713Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2025-61594","description":"URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure. This is a a bypass for the fix to CVE-2025-27221 that can expose user credentials. This issue has been fixed in versions 0.12.5, 0.13.3 and 1.0.4.","status":"published","published":"2025-12-30T21:15:00Z","modified":"2026-10-28T20:15:56.495226795Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N","level":"low"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"ALSA-2025:23062","title":"Moderate: ruby:3.3 security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  \n\nSecurity Fix(es):  \n\n  * resolv: Denial of Service in resolv gem (CVE-2025-24294)\n  * rexml: REXML denial of service (CVE-2025-58767)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-12-10T00:00:00Z","modified":"2026-10-29T11:12:06.571285272Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:23063","title":"Moderate: ruby:3.3 security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  \n\nSecurity Fix(es):  \n\n  * resolv: Denial of Service in resolv gem (CVE-2025-24294)\n  * rexml: REXML denial of service (CVE-2025-58767)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-12-10T00:00:00Z","modified":"2026-10-29T11:42:20.901755457Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:23141","title":"Moderate: ruby security update","description":"Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  \n\nSecurity Fix(es):  \n\n  * resolv: Denial of Service in resolv gem (CVE-2025-24294)\n  * rexml: REXML denial of service (CVE-2025-58767)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-12-11T00:00:00Z","modified":"2026-10-29T11:42:21.848180832Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"AZL-73356","title":"CVE-2025-61594 affecting package ruby for versions less than 3.3.5-7","description":"URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure. This is a a bypass for the fix to CVE-2025-27221 that can expose user credentials. This issue has been fixed in versions 0.12.5, 0.13.3 and 1.0.4.","status":"published","published":"2025-12-30T21:15:43Z","modified":"2026-10-31T15:02:25Z","updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"AZL-73391","title":"CVE-2025-61594 affecting package ruby for versions less than 3.1.7-4","description":"URI is a module providing classes to handle Uniform Resource Identifiers. In versions prior to 0.12.5, 0.13.3, and 1.0.4, a bypass exists for the fix to CVE-2025-27221 that can expose user credentials. When using the `+` operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure. Versions 0.12.5, 0.13.3, and 1.0.4 fix the issue.","status":"published","published":"2025-12-30T21:15:43Z","modified":"2026-04-21T04:33:52.619871Z","updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"CLSA-2026-1768839607","title":"ruby: Fix of 2 CVEs","description":"- CVE-2025-61594: fix incomplete fix for CVE-2025-27221 which allowed credential leaks\n  to persist in URI#+\n- fully redact x-oauth-basic tokens from tests\n- update URI specs to reflect that modifying user or host clears credentials","status":"published","published":"2026-01-19T16:20:11Z","modified":"2026-10-21T10:47:35.515508095Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1769511237","title":"ruby: Fix of 2 CVEs","description":"- CVE-2025-61594: fix incomplete fix for CVE-2025-27221 which allowed credential leaks\n  to persist in URI#+\n  CVE-2025-27221: fix credential leak by correctly truncating userinfo","status":"published","published":"2026-01-27T10:54:01Z","modified":"2026-10-21T10:46:39.415137834Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"openSUSE-SU-2025:15614-1","title":"libruby3_4-3_4-3.4.7-1.1 on GA media","description":"These are all security issues fixed in the libruby3_4-3_4-3.4.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-10-08T00:00:00Z","modified":"2026-03-23T04:54:00.663044Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:11204-1","title":"ruby4.0-rubygem-uri-1.1.1-1.1 on GA media","description":"These are all security issues fixed in the ruby4.0-rubygem-uri-1.1.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-07T00:00:00Z","modified":"2026-07-09T10:00:07.511162091Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21878-1","title":"Security update for ruby3.4","description":"This update for ruby3.4 fixes the following issues:\n\n- CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations (bsc#1250016).\n- CVE-2026-27820: insufficient checks in `zstream_buffer_ungets` can lead to a buffer overflow (bsc#1259239).\n- CVE-2026-41316: erb: @_init deserialization guard bypass via def_module / def_method / def_class (bsc#1262441).\n- CVE-2026-42258: ruby: Net:IMAP: IMAP Command Injection via Symbol Arguments (bsc#1268011).\n- CVE-2026-47240: Net:IMAP: Command Injection via non-synchronizing literal in \"raw\" argument (bsc#1268337).\n- CVE-2026-47241: Net:IMAP: Denial of Service via incomplete raw argument validation (bsc#1268338).\n- CVE-2026-47242: Net:IMAP: Command Injection via ID and ENABLE command arguments (bsc#1268339).\n- CVE-2025-61594: rubygem-uri: URI concatenation with the plus operator can cause credential disclosure (bsc#1255833).\n\nChanges for ruby3.4:\n\n- Update to 3.4.10.\n\n- Update to 3.4.9:\n\n - Bug #21715: Miscompilation on x86-64-v2 due to undefined\n behavior in search_nonascii in string.c - Ruby - Ruby Issue\n Tracking System\n - Bug #21787: IO::Buffer Integer Overflow in Range Validation\n Leads to Out-of-Bounds Memory Access - Ruby - Ruby Issue\n - Bug #21757: Splatted args array is mutated when passing\n unexpected kwargs - Ruby - Ruby Issue Tracking System\n - Bug #21326: Instruction generation differences between parse.y\n and prism for def a(x, ...); b(...); end - Ruby - Ruby Issue\n - Bug #21814: 0.pow(2,-9999999999999999990) should be zero - Ruby\n - Ruby Issue Tracking System\n - Bug #21819: A Data object should be frozen even if it has no\n members - Ruby - Ruby Issue Tracking System\n - Bug #21811: Fix underflow in Array#pack - Ruby - Ruby Issue\n - Bug #21838: Rails seeing degradation (20% slowdown) related to\n Revision 079ef92b \"Implement global allocatable slots and empty\n pages\" (from Sep 5 2024) - Ruby - Ruby Issue Tracking System\n - Bug #21931: GC Crash in String#% (backport\n 726205b354d1068147719fb42e1de743f1838ef1) - Ruby - Ruby Issue\n - Bug #21860: Process.fork: the child may deadlock on\n th-\u003einterrupt_lock in threadptr_interrupt_exec_cleanup - Ruby -\n Ruby Issue Tracking System\n - Bug #21873: UnboundMethod#== returns false for methods from\n included/extended modules - Ruby - Ruby Issue Tracking System\n\n- Update to 3.4.8:\n\n  - Bug #21629: Ruby-3.4.7 prints -Wdefault-const-init-field-unsafe\n warnings on clang / llvm 21 - Ruby - Ruby Issue Tracking System\n - Bug #21626: Backport WASI setjmp handler memory leak fixes -\n Ruby - Ruby Issue Tracking System\n - Bug #21631: Backport openssl gem bugfix releases - Ruby - Ruby\n Issue Tracking System\n - Bug #21632: Backport REXML CVE-2025-58767 fix (bsc#1250016) -\n - Bug #21644: Stack consistency error for the newrange INSN\n peephole optimization with chilled string - Ruby - Ruby Issue\n - Bug #21668: Improve performance of\n UnicodeNormalize.canonical_ordering_one - Ruby - Ruby Issue\n - Bug #21638: Ractor-local $DEBUG is not marked - Ruby - Ruby\n - Bug #21652: Marshal#dump documentation out-of-date/unclear\n regarding Data class - Ruby - Ruby Issue Tracking System\n - Bug #13671: Regexp with lookbehind and case-insensitivity\n raises RegexpError only on strings with certain characters -\n - Bug #21625: Allow IO#wait_readable together with IO#ungetc even\n in text mode - Ruby - Ruby Issue Tracking System\n - Bug #21671: Rails CI raises Assertion Failed:\n rbimpl_rstring_getmem:RB_TYPE_P(str, RUBY_T_STRING): actual\n type: 26 with \"-DENABLE_PATH_CHECK=0 -DRUBY_DEBUG=1\" enabled -\n - Update next stable version to 4.0 from 3.5 by hsbt . Pull\n Request #15146\n - Bug #21679: Segfault when ruby calls pthread_detach in\n rb_getnameinfo - Ruby - Ruby Issue Tracking System\n - Bug #21694: Crash when looking up super method from BasicObject\n - Ruby - Ruby Issue Tracking System\n - Bug #21707: Destructuring assignment of SimpleDelegator wrapped\n array bug with YJIT - Ruby - Ruby Issue Tracking System\n - Bug #21265: Crash when proc from Symbol#to_proc called outside\n refinement scope - Ruby - Ruby Issue Tracking System\n - Bug #21703: RUBY_CRASH_REPORT does not work when shelling out\n in some cases - Ruby - Ruby Issue Tracking System\n - Bug #21666: Math.lgamma(-1).should == [infinity_value, 1] fails\n with Fedora glibc-2.42.9000-8.fc44 - Ruby - Ruby Issue Tracking\n System\n - Bug #21655: segfault when building 3.3.10 with GCC 15.2.1,\n regression from 3.3.9 - Ruby - Ruby Issue Tracking System\n - Bug #21680: Integer#digits bug starting from Ruby 3.1 - Ruby -\n - Bug #21705: UNIXServer.open(nil) segfaults on Windows - Ruby -\n - Bug #21648: [prism] ruby crashes for for * in [10]; end - Ruby\n - Bug #21187: Strings concatenated with \\ getting frozen with\n literal hashes (PRISM only) - Ruby - Ruby Issue Tracking System\n - Bug #21772: ruby: YJIT has panicked StackOpnd(1) should be a\n heap object, but was ImmSymbol for VALUE(137647867319760) -\n - Bug #21446: StackOverflow when changing visibility in reopened\n refinement - Ruby - Ruby Issue Tracking System\n - Bug #21779: Do not export functions from statically linked\n extensions - Ruby - Ruby Issue Tracking System\n - Bug #21266: YJIT GC safety crash with proc objects as block\n argument - Ruby - Ruby Issue Tracking System\n","status":"published","published":"2026-09-18T13:34:12Z","modified":"2026-09-25T18:23:10.633194964Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:3090-1","title":"Security update for ruby3.4","description":"This update for ruby3.4 fixes the following issues\n\n- CVE-2026-42258: Net:IMAP: Command Injection via Symbol Arguments (bsc#1268011).\n- CVE-2026-47240: Net:IMAP: Command Injection via non-synchronizing literal in 'raw' argument (bsc#1268337).\n- CVE-2026-47241: Net:IMAP: Denial of Service via incomplete raw argument validation (bsc#1268338).\n- CVE-2026-47242: Net:IMAP: Command Injection via ID and ENABLE command arguments (bsc#1268339).\n- CVE-2025-61594: merging URIs using the + operator could expose sensitive user credentials (bsc#1270034).\n\nChanges for ruby3.4:\n\n- Update to 3.4.10: \n\n  - bundling net-imap 0.5.15.\n","status":"published","published":"2026-07-17T06:13:22Z","modified":"2026-07-18T08:45:08.623601243Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"USN-8137-1","title":"ruby2.3, ruby2.5, ruby2.7, ruby3.0, ruby3.2, ruby3.3 vulnerability","description":"It was discovered that the Ruby URI gem did not properly handle sensitive\ninformation when combining URIs. A remote attacker could possibly use this\nissue to leak authentication credentials.","status":"published","published":"2026-03-31T08:49:35Z","modified":"2026-10-27T04:16:53.9194767Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}