The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-minitestUpgrade rubygem-pgUpgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade rubygem-mongoUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade rubygems-develUpgrade rubygem-bson-docUpgrade rubygem-io-consoleUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-test-unitUpgrade rubygem-rssUpgrade rubygem-power_assertUpgrade rubygem-mysql2-docUpgrade rubygem-bundlerUpgrade ruby-bundled-gemsUpgrade rubygem-jsonUpgrade ruby-irbUpgrade rubygem-mongo-docUpgrade rubygem-irbUpgrade rubyUpgrade rubygem-pg-docUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-bundler-docUpgrade rubygem-rakeUpgrade rubygem-rbsUpgrade rubygem-abrtUpgrade rubygem-rexmlUpgrade rubygem-bsonUpgrade rubygem-rdocUpgrade rubygem-mysql2 | Jul 4, 2023 | Nov 18, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Nov 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-io-consoleUpgrade rubygem-irbUpgrade ruby-tcltkUpgrade rubygem-bigdecimalUpgrade rubyUpgrade rubygem-rbsUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-bundlerUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade rubygemsUpgrade rubygem-jsonUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-opensslUpgrade rubygem-power_assertUpgrade rubygem-rssUpgrade rubygem-minitestUpgrade rubygem-xmlrpcUpgrade rubygem-net-telnetUpgrade rubygem-test-unitUpgrade ruby-libsUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade rubygem-psych | Sep 28, 2023 | Nov 18, 2022 |
| Centos_linux | — | Upgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubygem-openssl-debuginfoUpgrade rubygem-pg-docUpgrade ruby-debugsourceUpgrade ruby-default-gemsUpgrade rubygem-io-consoleUpgrade rubygem-pg-debugsourceUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-abrtUpgrade rubygem-bson-debuginfoUpgrade rubygem-psychUpgrade ruby-debuginfoUpgrade rubygemsUpgrade ruby-libsUpgrade ruby-libs-debuginfoUpgrade rubygem-jsonUpgrade ruby-docUpgrade rubygem-mysql2Upgrade rubygem-mongo-docUpgrade rubygem-abrt-docUpgrade rubygem-psych-debuginfoUpgrade rubyUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rdocUpgrade ruby-irbUpgrade rubygem-xmlrpcUpgrade rubygem-bundler-docUpgrade rubygem-rakeUpgrade rubygem-opensslUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-bson-docUpgrade rubygem-pgUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-test-unitUpgrade ruby-develUpgrade rubygem-mysql2-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimal-debuginfo | Jun 28, 2023 | Nov 18, 2022 |
| Debian | — | Upgrade ruby2.7Upgrade ruby3.1 | Jun 12, 2023 | Nov 18, 2022 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade rubygem-cgiUpgrade ruby32Upgrade ruby31Upgrade rubyUpgrade ruby30Upgrade ruby27 | Nov 25, 2022 | Nov 24, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Mar 20, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | May 8, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Apr 13, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Mar 9, 2023 | Nov 18, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-xmlrpcUpgrade rubygem-mysql2-docUpgrade rubygem-bson-docUpgrade rubygem-io-consoleUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-rdocUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-abrt-docUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubygem-bigdecimalUpgrade rubygem-opensslUpgrade rubygem-rssUpgrade ruby-bundled-gemsUpgrade rubyUpgrade rubygem-bundlerUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-minitestUpgrade rubygem-bundler-docUpgrade rubygem-abrtUpgrade ruby-irbUpgrade rubygem-psychUpgrade rubygem-typeprofUpgrade rubygem-mysql2Upgrade rubygemsUpgrade rubygem-mongoUpgrade ruby-libsUpgrade rubygem-pgUpgrade rubygem-net-telnetUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade ruby-develUpgrade rubygem-rbsUpgrade rubygem-irb | Jul 8, 2023 | Nov 18, 2022 |
| Redhat_linux | — | Upgrade rubygem-xmlrpcUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade rubygem-power_assertUpgrade ruby-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade rubygem-typeprofUpgrade ruby-debuginfoUpgrade rubygem-minitestUpgrade rubygem-bson-debuginfoUpgrade rubygemsUpgrade rubygem-pg-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade rubygem-rbs-debuginfoUpgrade rubygem-rakeUpgrade rubygem-opensslUpgrade rubygem-pg-docUpgrade ruby-irbUpgrade rubygem-abrtNo solution existsUpgrade rubygem-mongoUpgrade ruby-default-gemsUpgrade rubygem-mysql2-debuginfoUpgrade ruby-docUpgrade rubygem-bson-debugsourceUpgrade ruby-develUpgrade rubygem-rdocUpgrade rubygem-mysql2Upgrade rubygem-rssUpgrade rubygem-jsonUpgrade rubygem-mysql2-docUpgrade rubygem-mongo-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-rexmlUpgrade rubygem-did_you_meanUpgrade ruby-libs-debuginfoUpgrade ruby-bundled-gemsUpgrade ruby-bundled-gems-debuginfoUpgrade rubyUpgrade rubygem-bundler-docUpgrade rubygem-pgUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade rubygem-bsonUpgrade rubygem-irb | Jun 28, 2023 | Nov 18, 2022 |
| Rocky_linux | — | Upgrade rubygem-pg-debugsourceUpgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade rubygem-rbsUpgrade rubygem-json-debuginfoUpgrade rubyUpgrade ruby-libs-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-pgUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade ruby-bundled-gems-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby-libsUpgrade ruby-debuginfoUpgrade rubygem-opensslUpgrade rubygem-psychUpgrade rubygem-rbs-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade ruby-develUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-pg-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimal-debuginfo | Mar 5, 2024 | Nov 18, 2022 |
| Suse | — | Upgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-stdlibUpgrade ruby2.5-devel-extraUpgrade ruby2.5Upgrade ruby2.5-develUpgrade ruby2.5-doc | Aug 9, 2024 | Nov 18, 2022 |
| Ubuntu | — | Upgrade libruby2.3 (Ubuntu Pro)Upgrade libruby2.5Upgrade libruby2.7Upgrade ruby2.5Upgrade ruby3.1Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby3.0Upgrade ruby3.0Upgrade ruby2.7Upgrade libruby3.1 | Jan 18, 2023 | Nov 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub