The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bson-docUpgrade rubygemsUpgrade rubygem-abrt-docUpgrade rubygem-net-telnetUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygem-xmlrpcUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade rubygem-pgUpgrade rubygem-rssUpgrade rubygem-test-unitUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-pg-docUpgrade rubygem-irbUpgrade ruby-default-gemsUpgrade rubygem-rexmlUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-did_you_meanUpgrade rubygem-bundler-docUpgrade rubygem-rbsUpgrade rubygem-mysql2-docUpgrade rubygem-bsonUpgrade ruby-irbUpgrade rubygem-rdocUpgrade ruby-bundled-gemsUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade rubygem-mongo-docUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade rubygem-abrtUpgrade ruby | Jul 4, 2023 | Nov 18, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Nov 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubyUpgrade ruby-develUpgrade ruby-tcltkUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade rubygem-rexmlUpgrade ruby-docUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade rubygem-did_you_meanUpgrade rubygem-rssUpgrade rubygem-rdocUpgrade ruby-default-gemsUpgrade rubygems-develUpgrade rubygemsUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade rubygem-typeprofUpgrade rubygem-test-unitUpgrade rubygem-net-telnetUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade rubygem-xmlrpc | Sep 28, 2023 | Nov 18, 2022 |
| Centos_linux | — | Upgrade ruby-libsUpgrade rubygem-mysql2-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-irbUpgrade rubygem-jsonUpgrade rubygemsUpgrade rubyUpgrade rubygem-abrtUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade ruby-docUpgrade rubygem-bsonUpgrade rubygem-openssl-debuginfoUpgrade rubygem-did_you_meanUpgrade ruby-default-gemsUpgrade ruby-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-mongo-docUpgrade rubygem-pg-docUpgrade rubygem-pg-debugsourceUpgrade rubygem-abrt-docUpgrade rubygem-bundlerUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bundler-docUpgrade rubygem-xmlrpcUpgrade rubygem-pg-debuginfoUpgrade rubygem-pgUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-opensslUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-rdocUpgrade rubygem-net-telnetUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade rubygem-mongoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygems-develUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade rubygem-json-debuginfo | Jun 28, 2023 | Nov 18, 2022 |
| Debian | — | Upgrade ruby2.7Upgrade ruby3.1 | Jun 12, 2023 | Nov 18, 2022 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade rubygem-cgiUpgrade ruby32Upgrade ruby30Upgrade rubyUpgrade ruby27Upgrade ruby31 | Nov 25, 2022 | Nov 24, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Mar 20, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | May 8, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Apr 13, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Mar 9, 2023 | Nov 18, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade ruby-irbUpgrade rubygem-abrtUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade ruby-develUpgrade rubygem-bsonUpgrade rubygem-rbsUpgrade rubygemsUpgrade rubygem-rssUpgrade rubygem-mongoUpgrade ruby-default-gemsUpgrade rubygem-minitestUpgrade rubygem-bundler-docUpgrade ruby-libsUpgrade rubygem-bundlerUpgrade rubyUpgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubygem-typeprofUpgrade ruby-bundled-gemsUpgrade rubygem-pg-docUpgrade rubygem-irbUpgrade rubygem-bson-docUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade rubygem-abrt-docUpgrade rubygem-mysql2-docUpgrade rubygem-io-consoleUpgrade rubygem-rdocUpgrade rubygem-did_you_meanUpgrade rubygems-develUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade ruby-docUpgrade rubygem-xmlrpc | Jul 8, 2023 | Nov 18, 2022 |
| Redhat_linux | — | Upgrade ruby-default-gemsUpgrade rubygem-bsonUpgrade ruby-docUpgrade rubygem-opensslUpgrade rubygem-pgUpgrade rubygem-bundlerUpgrade rubygem-rexmlUpgrade ruby-bundled-gemsUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade ruby-irbUpgrade rubygem-irbUpgrade rubyUpgrade rubygem-mongo-docUpgrade rubygem-mongoUpgrade rubygem-rbsUpgrade rubygem-pg-docUpgrade ruby-libs-debuginfoUpgrade rubygem-abrtNo solution existsUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-did_you_meanUpgrade ruby-develUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-docUpgrade rubygem-jsonUpgrade rubygem-rdocUpgrade rubygem-rssUpgrade rubygem-bundler-docUpgrade rubygem-mysql2Upgrade rubygem-io-console-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-minitestUpgrade ruby-libsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-bson-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-xmlrpcUpgrade rubygem-psychUpgrade rubygem-psych-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-pg-debuginfoUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade ruby-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-net-telnetUpgrade rubygem-typeprof | Jun 28, 2023 | Nov 18, 2022 |
| Rocky_linux | — | Upgrade rubygem-bson-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade rubygem-io-console-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade ruby-bundled-gemsUpgrade rubyUpgrade rubygem-pgUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-jsonUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-opensslUpgrade ruby-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-rbs-debuginfoUpgrade rubygem-psychUpgrade rubygem-rbs | Mar 5, 2024 | Nov 18, 2022 |
| Suse | — | Upgrade ruby2.5-doc-riUpgrade ruby2.5-stdlibUpgrade ruby2.5-devel-extraUpgrade ruby2.5Upgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade ruby2.5-devel | Aug 9, 2024 | Nov 18, 2022 |
| Ubuntu | — | Upgrade libruby3.0Upgrade ruby3.0Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.7Upgrade libruby3.1Upgrade libruby2.3 (Ubuntu Pro)Upgrade libruby2.5Upgrade ruby3.1Upgrade libruby2.7Upgrade ruby2.5 | Jan 18, 2023 | Nov 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub