debian/ruby-addressable vulnerabilities

Latest debian/ruby-addressable CVEs

Newest publication first

1. CVE-2026-35611 Addressable has a Regular Expression Denial of Service in Addressable templates

   Published 2026-04-07

   High·CVSS 7.5 PoC

   Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 to before 2.9.0, within the URI template implementation in Addressable, two classes of URI template generate regular expressions vulnerable to catastrophic b...

2. CVE-2021-32740 Regular Expression Denial of Service in Addressable templates

   Published 2021-07-06

   High·CVSS 7.5 PoC

   Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciousl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.