The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-default-gemsUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade rubygem-did_you_meanUpgrade rubygem-rexmlUpgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubygem-irbUpgrade rubygem-bsonUpgrade rubygem-rakeUpgrade ruby-docUpgrade rubygem-pg-docUpgrade rubygem-bundler-docUpgrade ruby-irbUpgrade rubygem-rdocUpgrade rubygem-bundlerUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade ruby-develUpgrade rubygem-rbsUpgrade ruby-bundled-gemsUpgrade rubygem-power_assertUpgrade rubygem-rssUpgrade rubygem-xmlrpcUpgrade rubygem-abrt-docUpgrade rubygemsUpgrade rubygem-io-consoleUpgrade rubygem-bson-docUpgrade rubygem-net-telnetUpgrade rubygem-typeprofUpgrade rubygem-test-unitUpgrade rubygem-minitestUpgrade ruby-libsUpgrade rubygem-mongoUpgrade rubygems-develUpgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-bigdecimal | Jul 4, 2023 | Nov 18, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Nov 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rssUpgrade rubygem-net-telnetUpgrade rubygem-power_assertUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-typeprofUpgrade rubygem-jsonUpgrade rubygemsUpgrade rubygem-opensslUpgrade ruby-libsUpgrade rubygems-develUpgrade rubygem-psychUpgrade rubygem-xmlrpcUpgrade ruby-default-gemsUpgrade rubygem-minitestUpgrade ruby-tcltkUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade rubygem-bigdecimalUpgrade rubygem-rbsUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubygem-rexmlUpgrade ruby-debuginfoUpgrade rubygem-bundlerUpgrade ruby-irbUpgrade rubyUpgrade rubygem-io-console | Sep 28, 2023 | Nov 18, 2022 |
| Centos_linux | — | Upgrade rubygemsUpgrade ruby-libsUpgrade ruby-libs-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-psychUpgrade ruby-docUpgrade rubygem-abrt-docUpgrade rubygem-psych-debuginfoUpgrade rubygem-irbUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-docUpgrade ruby-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mongo-docUpgrade ruby-default-gemsUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade rubygem-bsonUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubyUpgrade rubygem-did_you_meanUpgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade ruby-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygems-develUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mongoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-opensslUpgrade rubygem-rakeUpgrade rubygem-power_assertUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-pgUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-test-unitUpgrade ruby-develUpgrade rubygem-bson-docUpgrade ruby-irbUpgrade rubygem-xmlrpcUpgrade rubygem-bundler-docUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygem-net-telnetUpgrade rubygem-mysql2-doc | Jun 28, 2023 | Nov 18, 2022 |
| Debian | — | Upgrade ruby3.1Upgrade ruby2.7 | Jun 12, 2023 | Nov 18, 2022 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby27Upgrade ruby30Upgrade ruby31Upgrade rubyUpgrade rubygem-cgiUpgrade ruby32 | Nov 25, 2022 | Nov 24, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Mar 20, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | May 8, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Apr 13, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Mar 9, 2023 | Nov 18, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-mysql2Upgrade rubygem-typeprofUpgrade ruby-irbUpgrade ruby-bundled-gemsUpgrade rubygem-power_assertUpgrade rubygem-psychUpgrade rubygem-abrtUpgrade rubygem-bundler-docUpgrade ruby-libsUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-pg-docUpgrade rubygemsUpgrade rubygem-bsonUpgrade rubygem-irbUpgrade rubygem-rssUpgrade rubyUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade rubygem-rbsUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-net-telnetUpgrade ruby-develUpgrade rubygem-pgUpgrade rubygem-rexmlUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade rubygem-mongo-docUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-docUpgrade ruby-docUpgrade rubygem-rdocUpgrade rubygem-io-consoleUpgrade rubygem-bson-docUpgrade rubygem-xmlrpcUpgrade rubygem-abrt-docUpgrade rubygem-rakeUpgrade rubygem-test-unit | Jul 8, 2023 | Nov 18, 2022 |
| Redhat_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygem-rdocUpgrade rubygem-mongo-docUpgrade rubygem-jsonUpgrade rubygem-rbsUpgrade rubygem-pg-debugsourceUpgrade ruby-docUpgrade rubygem-rssUpgrade rubyUpgrade rubygem-rexmlUpgrade rubygem-bundler-docNo solution existsUpgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade rubygem-did_you_meanUpgrade rubygem-mysql2Upgrade ruby-irbUpgrade rubygem-opensslUpgrade rubygem-mongoUpgrade rubygem-bundlerUpgrade rubygem-bsonUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-pgUpgrade rubygem-irbUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-bson-debugsourceUpgrade rubygem-abrtUpgrade ruby-bundled-gemsUpgrade ruby-libs-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-rbs-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-openssl-debuginfoUpgrade ruby-libsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-xmlrpcUpgrade rubygem-psychUpgrade rubygem-psych-debuginfoUpgrade rubygem-bson-docUpgrade ruby-debugsourceUpgrade rubygems-develUpgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygemsUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimal | Jun 28, 2023 | Nov 18, 2022 |
| Rocky_linux | — | Upgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-develUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-rbsUpgrade rubygem-jsonUpgrade ruby-bundled-gemsUpgrade ruby-debugsourceUpgrade ruby-bundled-gems-debuginfoUpgrade rubyUpgrade rubygem-pgUpgrade rubygem-bigdecimalUpgrade rubygem-opensslUpgrade ruby-debuginfoUpgrade rubygem-pg-debugsourceUpgrade ruby-libsUpgrade ruby-libs-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade rubygem-json-debuginfoUpgrade rubygem-bson | Mar 5, 2024 | Nov 18, 2022 |
| Suse | — | Upgrade ruby2.5-docUpgrade libruby2_5-2_5Upgrade ruby2.5-develUpgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade ruby2.5Upgrade ruby2.5-doc-ri | Aug 9, 2024 | Nov 18, 2022 |
| Ubuntu | — | Upgrade ruby2.7Upgrade ruby3.0Upgrade libruby3.0Upgrade libruby3.1Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby2.5Upgrade libruby2.3 (Ubuntu Pro)Upgrade libruby2.7Upgrade ruby3.1Upgrade ruby2.5 | Jan 18, 2023 | Nov 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 18, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub