ring-clojure vulnerabilities

Products

• ring 1

Latest ring-clojure CVEs

Newest publication first

1. CVE-2026-62864 Ring's nested-params middleware has inefficient regular expression complexity

   Published 2026-10-30

   High·CVSS 7.5

   Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack. Prior to 1.15.5, wrap-nested-params in the ring.middleware.nested-params namespace uses a backtracking regular expression to match parameter names from URL query strings and HTTP request bodies....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.