Threats tagged 'brew-mikutter-cve-2026-126352'

Addressable versions from 2.3.0 (earliest installable 2.3.2) through 2.9.0 contain a Regular Expression Denial of Service (ReDoS) vulnerability in URI template matching. Templates with multiple variables in one expression or several adjacent expressions generate regular expressions vulnerable to excessive backtracking, causing high CPU usage and denial of service when matching crafted URIs. The issue affects Ruby implementations with backtracking regex engines such as MRI Ruby < 3.3, JRuby, and TruffleRuby 40.0. The vulnerability is fixed in Addressable 2.9.1 and mitigated in MRI Ruby 3.3 and later.