CGI vulnerabilities

1 known vulnerability in CGI from Ruby-lang. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  CGI: Allocation of Resources Without Limits or Throttling

  CVE-2025-27219Mar 4, 2025Ruby-lang

  In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead t