Latest ruby-lang cgi Vulnerabilities

● CVE-2021-33621

A vulnerability was found in Ruby that allows HTTP header injection. A CGI application using the CGI library may insert untrusted input into the HTTP response header. This issue can allow an attacker ...

redhat/rh-ruby27-ruby<0:2.7.8-132.el7

Ruby-lang Cgi<0.1.0.2

Ruby-lang Cgi>=0.2.0<0.2.2

Ruby-lang Cgi>=0.3.0<0.3.5

Fedoraproject Fedora=35

Fedoraproject Fedora=36

and 17 more

● CVE-2021-41816

A buffer overrun vulnerability was discovered in CGI.escape_html. This can lead to a buffer overflow when a user passes a very large string (> 700 MB) to CGI.escape_html on a platform where long type ...

rubygems/cgi<0.1.0.1

rubygems/cgi>=0.2.0<0.2.1

rubygems/cgi>=0.3.0<0.3.1

redhat/rh-ruby30-ruby<0:3.0.4-149.el7

redhat/rh-ruby27-ruby<0:2.7.6-131.el7

Ruby-lang Cgi<0.3.1

and 19 more

● CVE-2021-41819

A flaw was found in Ruby. RubyGems cgi gem could allow a remote attacker to conduct spoofing attacks caused by the mishandling of security prefixes in cookie names in the CGI::Cookie.parse function. B...

rubygems/cgi<0.1.0.1

rubygems/cgi=0.2.0

rubygems/cgi=0.3.0

redhat/rh-ruby26-ruby<0:2.6.9-120.el7

redhat/rh-ruby30-ruby<0:3.0.4-149.el7

redhat/rh-ruby27-ruby<0:2.7.6-131.el7

and 42 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.