All products

addressable

RubyGems · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Addressable display_uri can show misleading hosts with invalid Punycode A-labelsCVE-2026-126348 · GHSA-9CRM-G4MF-WC5J addressable RubyGems Medium Fix reported
Addressable display_uri can show misleading hosts containing bidi and invisible charactersCVE-2026-126349 · GHSA-539F-XCGW-2GJG addressable RubyGems Low Fix reported
Addressable: Denial of service in URI path normalizationCVE-2026-126351 · GHSA-QQ38-M9MG-XJJ5 addressable RubyGems Medium Fix reported
Addressable: Regular Expression Denial of Service in templates with certain exploded expressionsCVE-2026-126350 · GHSA-J82W-28JV-3PMJ addressable RubyGems Medium Fix reported
Addressable: Regular Expression Denial of Service in templates with multiple variablesCVE-2026-126352 · GHSA-9F42-57JX-VPP3 addressable RubyGems Medium Fix reported
Addressable URI normalization resolves some dotted path segments to the wrong pathCVE-2026-126354 · GHSA-8GMH-2HHJ-2HV9 addressable RubyGems Medium Fix reported
Addressable has a Regular Expression Denial of Service in Addressable templatesCVE-2026-35611 · GHSA-H27X-RFFW-24P4 Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 Red HatRubyGems High Fix reported
Regular Expression Denial of Service in Addressable templatesCVE-2021-32740 · GHSA-JXHC-Q857-3J6G CloudForms Management Engine 5/cfme-gemsetRed Hat 3scale API Management Platform 2/3scale-amp-system Red HatRubyGems High Fix reported