Threats Tagged 'cve-2025-27221'

Logging for Red Hat OpenShift - 5.9.13 logging-fluentd-container: Net::IMAP vulnerable to possible DoS by memory exhaustion (CVE-2025-25186) logging-fluentd-container: Local File Inclusion in Rack::Static (CVE-2025-27610) lokistack-gateway-container: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144) lokistack-gateway-container: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)

In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.

LowVulnerabilityGermanyFranceUnited Kingdom+5#cve#cve-2025-27221#cwe-212

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * rexml: DoS vulnerability in REXML (CVE-2024-39908) * rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]> (CVE-2024-41123) * rexml: DoS vulnerability in REXML (CVE-2024-41946) * rexml: DoS vulnerability in REXML (CVE-2024-43398) * CGI: ReDoS in CGI::Util#escapeElement (CVE-2025-27220) * CGI: Denial of Service in CGI::Cookie.parse (CVE-2025-27219) * uri: userinfo leakage in URI#join, URI#merge and URI#+ (CVE-2025-27221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.