azure linux rubygem-addressable vulnerabilities

Latest azure linux rubygem-addressable CVEs

Newest publication first

1. CVE-2026-35611 Addressable has a Regular Expression Denial of Service in Addressable templates

   Published 2026-04-07

   High·CVSS 7.5 PoC

   Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 to before 2.9.0, within the URI template implementation in Addressable, two classes of URI template generate regular expressions vulnerable to catastrophic b...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.