CyberSecBulletin

Ring-clojure vulnerabilities

We track 1 vulnerability in Ring-clojure products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Ring-clojure vulnerabilities

  • 7.5 High severity

    ring: Inefficient Regular Expression Complexity

    CVE-2026-62864Ring-clojure

    Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack. Prior to 1.15.5, `wrap-nested-params` in the `ring.middleware.nested-params` namespace uses a backtracking regular expression to match parameter names from URL query strings