In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-abrtUpgrade rubygem-psychUpgrade rubygem-rbsUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade rubygem-rdocUpgrade rubygem-rssUpgrade rubygem-abrt-docUpgrade rubygem-rexmlUpgrade rubyUpgrade rubygem-mysql2Upgrade ruby-docUpgrade ruby-bundled-gemsUpgrade rubygemsUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade ruby-libsUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-minitestUpgrade rubygem-mysql2-docUpgrade rubygem-typeprofUpgrade ruby-develUpgrade rubygem-pg-docUpgrade rubygems-develUpgrade rubygem-power_assertUpgrade rubygem-io-consoleUpgrade ruby-default-gemsUpgrade rubygem-rake | May 9, 2025 | Mar 4, 2025 |
| Amazon_linux_2023 | — | Upgrade ruby3.2Upgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-debuginfoUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-default-gems | Apr 15, 2025 | Mar 3, 2025 |
| Debian | — | Upgrade ruby2.7Upgrade ruby3.3 | Mar 12, 2025 | Mar 4, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | May 13, 2025 | Mar 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Jun 13, 2025 | Mar 4, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Jun 11, 2025 | Mar 4, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Jun 11, 2025 | Mar 4, 2025 |
| Oracle_linux | — | Upgrade rubygems-develUpgrade rubygem-rdocUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-test-unitUpgrade rubygemsUpgrade rubygem-mysql2-docUpgrade rubygem-minitestUpgrade rubyUpgrade rubygem-abrtUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-rexmlUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-pgUpgrade ruby-libsUpgrade rubygem-mysql2Upgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-rbsUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-rssUpgrade ruby-bundled-gemsUpgrade rubygem-abrt-docUpgrade rubygem-pg-docUpgrade rubygem-typeprof | Apr 23, 2025 | Mar 3, 2025 |
| Redhat_linux | — | Upgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-rexmlUpgrade rubygem-typeprofUpgrade rubygem-pg-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-rbs-debuginfoUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-io-console-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-mysql2-docUpgrade ruby-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-mysql2-debuginfoUpgrade ruby-bundled-gemsUpgrade ruby-develUpgrade rubygemsUpgrade rubygem-bundlerUpgrade ruby-docUpgrade ruby-default-gemsUpgrade rubygem-jsonUpgrade ruby-bundled-gems-debuginfoNo solution existsUpgrade ruby-libs-debuginfoUpgrade rubygem-rbsUpgrade ruby-libsUpgrade rubyUpgrade rubygem-minitestUpgrade rubygem-irbUpgrade rubygem-pg-debugsourceUpgrade rubygem-psychUpgrade rubygem-pg-docUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade rubygem-pgUpgrade rubygem-rss | Apr 24, 2025 | Mar 4, 2025 |
| Rocky_linux | — | Upgrade ruby-libs-debuginfoUpgrade rubyUpgrade rubygem-jsonUpgrade ruby-bundled-gemsUpgrade rubygem-rbsUpgrade rubygem-pgUpgrade rubygem-pg-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubygem-psych-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-consoleUpgrade ruby-libsUpgrade rubygem-mysql2-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-rbs-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygem-json-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade ruby2.5-doc-riUpgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade ruby2.5-docUpgrade ruby2.5-develUpgrade libruby2_5-2_5Upgrade ruby2.5 | Dec 5, 2025 | Apr 24, 2025 |
| Ubuntu | — | Upgrade ruby3.0Upgrade libruby3.2Upgrade libruby3.3Upgrade libruby2.5 (Ubuntu Pro)Upgrade ruby2.7Upgrade ruby3.3Upgrade ruby2.5 (Ubuntu Pro)Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby3.0Upgrade libruby2.7Upgrade ruby3.2Upgrade libruby2.3 (Ubuntu Pro) | Apr 8, 2025 | Mar 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 3, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub