UR
Product
Uri
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch
Add Uri to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-61594 | 7.5 | Dec 30 | URI Credential Leakage Bypass over CVE-2025-27221 Affected: before 0.12.5; 0.13.0 before 0.13.3; 1.0.0 before 1.0.4 |
| CVE-2025-27221 | 5.3 | Mar 4 | In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained… Affected: before 0.11.3; 0.12.0 before 0.12.4; 0.13.0 before 0.13.2; 1.0.0 before 1.0.3 |
| CVE-2023-36617 | 5.3 | Jun 29 | A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby Affected: before 0.10.3; 0.11.0 before 0.12.2 |
| CVE-2023-28755 | 5.3 | Mar 31 | A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1 Affected: through 0.10.0; 0.10.1; 0.11.0; 0.12.0 |
Showing 4