The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygem-typeprofUpgrade rubygem-rexmlUpgrade rubygem-abrt-docUpgrade rubygem-rakeUpgrade rubygem-rdocUpgrade rubygem-bigdecimalUpgrade rubygem-raccUpgrade rubygem-test-unitUpgrade rubygems-develUpgrade rubygem-rbsUpgrade rubygemsUpgrade ruby-default-gemsUpgrade rubygem-rssUpgrade rubygem-mysql2Upgrade ruby-bundled-gemsUpgrade rubygem-irbUpgrade rubygem-minitestUpgrade rubygem-bundlerUpgrade rubygem-psychUpgrade rubygem-power_assertUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-pg-docUpgrade rubygem-abrtUpgrade ruby-docUpgrade rubyUpgrade ruby-develUpgrade rubygem-pg | May 9, 2025 | Mar 4, 2025 |
| Alpine Linux | — | Upgrade rubyUpgrade ruby-net-imap | Aug 8, 2025 | Mar 3, 2025 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2Upgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-docUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-io-console | Apr 15, 2025 | Mar 3, 2025 |
| Debian | — | Upgrade ruby2.7Upgrade ruby3.3 | Mar 12, 2025 | Mar 4, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | May 13, 2025 | Mar 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jun 13, 2025 | Mar 4, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade ruby-helpUpgrade rubyUpgrade ruby-irb | Jun 11, 2025 | Mar 4, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Jun 11, 2025 | Mar 4, 2025 |
| Oracle_linux | — | Upgrade rubygem-irbUpgrade ruby-default-gemsUpgrade rubygem-jsonUpgrade rubygem-rexmlUpgrade rubygem-rssUpgrade rubygem-bigdecimalUpgrade rubygem-bundlerUpgrade rubygem-rakeUpgrade ruby-docUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-abrtUpgrade ruby-bundled-gemsUpgrade rubygem-rbsUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade rubyUpgrade rubygem-mysql2Upgrade rubygem-test-unitUpgrade rubygems-develUpgrade rubygem-power_assertUpgrade rubygem-mysql2-docUpgrade rubygem-abrt-docUpgrade rubygem-pg-docUpgrade rubygem-pgUpgrade rubygemsUpgrade rubygem-typeprofUpgrade rubygem-rdocUpgrade rubygem-raccUpgrade rubygem-minitest | Apr 23, 2025 | Mar 3, 2025 |
| Redhat_linux | — | Upgrade rubygem-rakeUpgrade rubygem-raccUpgrade rubygem-pg-docUpgrade ruby-default-gemsUpgrade rubygem-pg-debuginfoUpgrade rubygems-develUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-power_assertUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-docUpgrade rubygem-minitestUpgrade rubygem-typeprofUpgrade ruby-develUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-rbs-debuginfoNo solution existsUpgrade ruby-libsUpgrade rubygem-mysql2Upgrade rubygem-bundlerUpgrade rubygem-pgUpgrade ruby-debugsourceUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-rbsUpgrade rubygem-bigdecimalUpgrade rubygem-abrtUpgrade rubygem-psych-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-racc-debuginfoUpgrade rubygemsUpgrade rubygem-pg-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade rubyUpgrade rubygem-irbUpgrade ruby-debuginfoUpgrade ruby-docUpgrade rubygem-rssUpgrade rubygem-rdocUpgrade rubygem-abrt-docUpgrade ruby-bundled-gems-debuginfo | Apr 24, 2025 | Mar 4, 2025 |
| Rocky_linux | — | Upgrade rubygem-pgUpgrade ruby-libs-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-raccUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade ruby-develUpgrade rubygem-racc-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-libsUpgrade rubygem-pg-debuginfoUpgrade rubyUpgrade rubygem-psychUpgrade rubygem-rbsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-pg-debugsourceUpgrade ruby-bundled-gemsUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade ruby-debugsourceUpgrade rubygem-jsonUpgrade rubygem-mysql2-debugsource | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade ruby2.5-doc-riUpgrade ruby2.5-devel-extraUpgrade ruby2.5Upgrade ruby2.5-devel | Dec 5, 2025 | Jul 3, 2025 |
| Ubuntu | — | Upgrade libruby2.3 (Ubuntu Pro)Upgrade libruby2.7Upgrade libruby3.3Upgrade ruby3.3Upgrade ruby2.5 (Ubuntu Pro)Upgrade ruby3.0Upgrade libruby2.5 (Ubuntu Pro)Upgrade libruby3.2Upgrade ruby3.2Upgrade ruby2.7Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby3.0 | Apr 8, 2025 | Mar 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 3, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub