The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade ruby-bundled-gemsUpgrade rubygem-jsonUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade rubygem-rdocUpgrade rubygem-bundler-docUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubygem-rexmlUpgrade rubygem-opensslUpgrade rubygem-pg-docUpgrade ruby-irbUpgrade rubyUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade rubygem-mysql2-docUpgrade ruby-develUpgrade rubygem-abrtUpgrade ruby-docUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygem-io-consoleUpgrade rubygem-typeprofUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade ruby-libsUpgrade rubygem-xmlrpcUpgrade rubygem-bson-docUpgrade rubygem-net-telnetUpgrade rubygem-rssUpgrade rubygem-pgUpgrade rubygem-minitestUpgrade rubygem-abrt-doc | Jul 4, 2023 | Nov 18, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Nov 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-opensslUpgrade rubygem-psychUpgrade rubygem-rssUpgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade rubygem-rdocUpgrade ruby-libsUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-minitestUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubygem-net-telnetUpgrade rubygem-test-unitUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubyUpgrade rubygem-bigdecimalUpgrade ruby-tcltkUpgrade ruby-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-rexmlUpgrade ruby-devel | Sep 28, 2023 | Nov 18, 2022 |
| Centos_linux | — | Upgrade rubygem-pgUpgrade rubygem-rdocUpgrade rubygem-json-debuginfoUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade rubygem-power_assertUpgrade rubygem-bson-docUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade rubygem-opensslUpgrade ruby-irbUpgrade rubygem-bundler-docUpgrade rubygem-xmlrpcUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygems-develUpgrade rubygem-bson-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-minitestUpgrade rubygem-mongoUpgrade rubygem-mysql2-docUpgrade rubygem-net-telnetUpgrade ruby-libsUpgrade rubygem-openssl-debuginfoUpgrade ruby-debugsourceUpgrade rubygemsUpgrade rubygem-io-consoleUpgrade ruby-debuginfoUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade rubygem-pg-docUpgrade rubygem-mongo-docUpgrade rubygem-bsonUpgrade rubygem-irbUpgrade rubygem-jsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-abrt-docUpgrade ruby-docUpgrade rubygem-psych-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-abrtUpgrade rubygem-mysql2Upgrade rubyUpgrade rubygem-did_you_meanUpgrade ruby-libs-debuginfo | Jun 28, 2023 | Nov 18, 2022 |
| Debian | — | Upgrade ruby2.7Upgrade ruby3.1 | Jun 12, 2023 | Nov 18, 2022 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade rubygem-cgiUpgrade ruby32Upgrade rubyUpgrade ruby31Upgrade ruby30Upgrade ruby27 | Nov 25, 2022 | Nov 24, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade rubyUpgrade ruby-irb | Mar 20, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | May 8, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Apr 13, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Mar 9, 2023 | Nov 18, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-rbsUpgrade rubygem-typeprofUpgrade rubygemsUpgrade rubygem-bundler-docUpgrade rubygem-psychUpgrade rubyUpgrade rubygem-pgUpgrade ruby-bundled-gemsUpgrade rubygem-jsonUpgrade ruby-develUpgrade rubygem-mysql2Upgrade rubygem-opensslUpgrade rubygem-minitestUpgrade ruby-libsUpgrade rubygem-pg-docUpgrade rubygem-rssUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade rubygem-net-telnetUpgrade rubygem-bundlerUpgrade rubygem-abrtUpgrade ruby-irbUpgrade ruby-default-gemsUpgrade rubygem-irbUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-bson-docUpgrade rubygem-test-unitUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-xmlrpcUpgrade ruby-docUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade rubygem-rakeUpgrade rubygem-abrt-docUpgrade rubygem-rdocUpgrade rubygem-mysql2-doc | Jul 8, 2023 | Nov 18, 2022 |
| Redhat_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygem-rdocUpgrade rubygem-rssUpgrade ruby-bundled-gemsUpgrade rubygem-bundler-docUpgrade rubygem-rbsUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-bson-debugsourceUpgrade rubygem-bsonUpgrade ruby-develUpgrade rubygem-mongo-docUpgrade rubygem-did_you_meanUpgrade ruby-libs-debuginfoUpgrade rubygem-mongoUpgrade rubygem-jsonUpgrade rubygem-pg-docUpgrade ruby-irbUpgrade rubygem-irbUpgrade rubyUpgrade rubygem-pgUpgrade rubygem-rexmlUpgrade rubygem-mysql2-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-abrtUpgrade rubygem-opensslUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bundlerUpgrade ruby-docNo solution existsUpgrade rubygem-bigdecimalUpgrade rubygemsUpgrade rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-test-unitUpgrade ruby-libsUpgrade rubygem-rbs-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygem-rakeUpgrade rubygem-bson-docUpgrade rubygem-psychUpgrade rubygem-xmlrpcUpgrade rubygem-psych-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-abrt-docUpgrade rubygem-bson-debuginfoUpgrade ruby-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-power_assert | Jun 28, 2023 | Nov 18, 2022 |
| Rocky_linux | — | Upgrade rubygem-pg-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-openssl-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby-develUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bigdecimalUpgrade rubyUpgrade ruby-debugsourceUpgrade ruby-bundled-gemsUpgrade rubygem-pgUpgrade ruby-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-bsonUpgrade rubygem-rbsUpgrade rubygem-pg-debugsourceUpgrade rubygem-json-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-opensslUpgrade rubygem-jsonUpgrade ruby-libs | Mar 5, 2024 | Nov 18, 2022 |
| Suse | — | Upgrade ruby2.5-doc-riUpgrade ruby2.5-stdlibUpgrade ruby2.5Upgrade ruby2.5-develUpgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade ruby2.5-devel-extra | Aug 9, 2024 | Nov 18, 2022 |
| Ubuntu | — | Upgrade ruby2.5Upgrade libruby2.5Upgrade ruby3.1Upgrade libruby2.7Upgrade libruby2.3 (Ubuntu Pro)Upgrade libruby3.0Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby3.0Upgrade libruby3.1Upgrade ruby2.7 | Jan 18, 2023 | Nov 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 18, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub