CG
Product
Cgi
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 0Low 0
Watch
Add Cgi to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-33621 | 8.8 | Nov 18 | The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting Affected: before 0.1.0.2; 0.2.0 before 0.2.2; 0.3.0 before 0.3.5 |
| CVE-2025-27220 | 7.5 | Mar 4 | In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method Affected: before 0.3.5.1; 0.4.0 before 0.4.2; 0.3.6 |
| CVE-2025-27219 | 7.5 | Mar 4 | In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability Affected: before 0.3.5.1; 0.4.0 before 0.4.2; 0.3.6 |
| CVE-2021-41819 | 7.5 | Jan 1 | CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names Affected: 0.1.0; 0.2.0; 0.3.0 |
Showing 4