https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:48:24.469043+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:10217 ALSA-2025:10217 — Moderate: ruby:3.3 security update 2026-10-03T16:48:24.796453+00:00

Affected: AlmaLinux:8: ruby, AlmaLinux:8: ruby-bundled-gems, AlmaLinux:8: ruby-default-gems, AlmaLinux:8: ruby-devel, AlmaLinux:8: ruby-doc, AlmaLinux:8: ruby-libs, AlmaLinux:8: rubygem-abrt, AlmaLinux:8: rubygem-abrt-doc, AlmaLinux:8: rubygem-bigdecimal, AlmaLinux:8: rubygem-bundler and 20 more

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.

Security Fix(es):

* net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion (CVE-2025-25186) * CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219) * uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-05128 bdu:2025-05128 2026-10-03T16:48:24.796566+00:00 bdu:2025-05128 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0512 certfr-2025-avi-0512 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T16:48:24.796586+00:00 certfr-2025-avi-0512 https://cve.radiocsirt.org/vuln/cleanstart-2026-ju41543 CLEANSTART-2026-JU41543 — Security fix for CVE-2025-27219 applied in: logstash-fips 9.2.4-r2 2026-10-03T16:48:24.796603+00:00

Affected: CleanStart: logstash-fips

Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-258265 EUVD-2026-258265 2026-10-03T16:48:24.796624+00:00 EUVD-2026-258265 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27219 fkie_cve-2025-27219 2026-10-03T16:48:24.796636+00:00

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.

 https://cve.radiocsirt.org/vuln/ghsa-gh9q-2xrm-x6qv GHSA-gh9q-2xrm-x6qv — CGI has Denial of Service (DoS) potential in Cookie.parse 2026-10-03T16:48:24.796658+00:00

Affected: RubyGems: cgi

There is a possibility for DoS by in the cgi gem. This vulnerability has been assigned the CVE identifier CVE-2025-27219. We recommend upgrading the cgi gem.

## Details

CGI::Cookie.parse took super-linear time to parse a cookie string in some cases. Feeding a maliciously crafted cookie string into the method could lead to a Denial of Service.

Please update CGI gem to version 0.3.5.1, 0.3.7, 0.4.2 or later.

## Affected versions

cgi gem versions <= 0.3.5, 0.3.6, 0.4.0 and 0.4.1.

## Credits

Thanks to lio346 for discovering this issue. Also thanks to mame for fixing this vulnerability.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-27219 msrc_CVE-2025-27219 — In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Se… 2026-10-03T16:48:24.796690+00:00 msrc_CVE-2025-27219 https://cve.radiocsirt.org/vuln/oesa-2025-1244 OESA-2025-1244 — ruby security update 2026-10-03T16:48:24.796708+00:00

Affected: openEuler:20.03-LTS-SP4: ruby

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks (such as Perl). Security Fix(es):

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.(CVE-2025-27219)

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.(CVE-2025-27220)

In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.(CVE-2025-27221)

 https://cve.radiocsirt.org/vuln/rhsa-2025:10217 RHSA-2025:10217 — Red Hat Security Advisory: ruby:3.3 security update 2026-10-03T16:48:24.796734+00:00

net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion CGI: Denial of Service in CGI::Cookie.parse uri: userinfo leakage in URI#join, URI#merge and URI#+

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-27219 UBUNTU-CVE-2025-27219 2026-10-03T16:48:24.796754+00:00

Affected: Ubuntu:Pro:14.04:LTS: jruby, Ubuntu:Pro:16.04:LTS: ruby2.3, Ubuntu:16.04:LTS: jruby, Ubuntu:Pro:18.04:LTS: ruby2.5, Ubuntu:18.04:LTS: jruby, Ubuntu:20.04:LTS: ruby2.7, Ubuntu:20.04:LTS: jruby, Ubuntu:22.04:LTS: ruby3.0, Ubuntu:24.04:LTS: jruby, Ubuntu:24.04:LTS: ruby3.2 and 3 more

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0438 WID-SEC-W-2025-0438 — Ruby (CGI und URI gem): Mehrere Schwachstellen 2026-10-03T16:48:24.796791+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen und vertrauliche Informationen preiszugeben.