Skip to content
Sign in
4.0 Medium

CVE-2025-27220 In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the…

Description

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.

Affected products and versions

Product Affected versions Fixed in
CGI 0.4 0.4.0 → < 0.4.2 0.4.2
CGI 0.3 earliest → < 0.3.7 0.3.5.1

Other CVEs of CGI

The 2 CVEs of CGI →
CVE-2025-27219 In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of… 5.8 Medium
Track this CVE