The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-power_assertUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygem-mysql2-docUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade rubygems-develUpgrade rubygem-rakeUpgrade rubygem-pg-docUpgrade ruby-default-gemsUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-psychUpgrade rubyUpgrade rubygem-test-unitUpgrade rubygem-bundlerUpgrade rubygem-mysql2Upgrade rubygem-pgUpgrade ruby-bundled-gemsUpgrade rubygem-rexmlUpgrade ruby-docUpgrade rubygem-rssUpgrade rubygem-abrt-docUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade rubygem-jsonUpgrade rubygem-abrtUpgrade rubygem-rbs | May 9, 2025 | Mar 4, 2025 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-develUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2Upgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-docUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-rexml | Apr 15, 2025 | Mar 3, 2025 |
| Debian | — | Upgrade ruby2.7Upgrade ruby3.3 | Mar 12, 2025 | Mar 4, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | May 13, 2025 | Mar 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Jun 13, 2025 | Mar 4, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade ruby-helpUpgrade rubyUpgrade ruby-irb | Jun 11, 2025 | Mar 4, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Jun 11, 2025 | Mar 4, 2025 |
| Oracle_linux | — | Upgrade rubygem-rakeUpgrade rubygem-rbsUpgrade rubygem-io-consoleUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade ruby-bundled-gemsUpgrade rubygem-pg-docUpgrade rubygem-rssUpgrade rubygem-typeprofUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubyUpgrade ruby-docUpgrade rubygems-develUpgrade rubygem-rdocUpgrade rubygem-abrtUpgrade rubygem-rexmlUpgrade rubygem-power_assertUpgrade rubygem-test-unitUpgrade ruby-default-gemsUpgrade rubygems | Apr 23, 2025 | Mar 3, 2025 |
| Redhat_linux | — | Upgrade rubygem-pg-docUpgrade rubygem-psychUpgrade rubygem-pgUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-jsonUpgrade rubygem-mysql2-debuginfoUpgrade ruby-libsUpgrade ruby-bundled-gemsUpgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygemsUpgrade ruby-docUpgrade rubygem-abrtUpgrade rubygem-rbsUpgrade rubygem-rssUpgrade rubygem-irbUpgrade rubyUpgrade rubygem-mysql2Upgrade ruby-libs-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-bundlerUpgrade ruby-develUpgrade rubygem-minitestNo solution existsUpgrade rubygem-typeprofUpgrade rubygem-rbs-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade rubygem-rexmlUpgrade rubygem-json-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debugsourceUpgrade ruby-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygems-develUpgrade rubygem-rdocUpgrade rubygem-rakeUpgrade rubygem-mysql2-doc | Apr 24, 2025 | Mar 4, 2025 |
| Rocky_linux | — | Upgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubygem-rbs-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-consoleUpgrade ruby-debuginfoUpgrade ruby-debugsourceUpgrade ruby-libsUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-jsonUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade rubygem-rbsUpgrade rubygem-pgUpgrade ruby-bundled-gemsUpgrade ruby-libs-debuginfoUpgrade rubyUpgrade ruby-bundled-gems-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade ruby2.5-stdlibUpgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5Upgrade ruby2.5-docUpgrade ruby2.5-devel | Dec 5, 2025 | Apr 24, 2025 |
| Ubuntu | — | Upgrade libruby2.7Upgrade ruby2.5 (Ubuntu Pro)Upgrade ruby3.2Upgrade libruby3.0Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby3.0Upgrade ruby2.7Upgrade ruby3.3Upgrade libruby3.3Upgrade libruby3.2Upgrade libruby2.5 (Ubuntu Pro) | Apr 8, 2025 | Mar 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 3, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub