Lucene search
K

CVE-2025-61921 Sinatra has ReDoS vulnerability in ETag header value generation

🗓️ 10 Oct 2025 19:28:10Reported by GitHub_MType 
cvelist
 cvelist
🔗 www.cve.org👁 8 Views

Sinatra before 4.2.0 has ReDoS in ETag header generation from If-Match and If-None-Match parsing when using the etag method.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
AstraLinux
Astra Linux – Vulnerability in ruby-sinatra
19 Jun 202611:10
astralinux
BDU FSTEC
The vulnerability of the Ruby Sinatra web application development framework’s parser allows a attacker to trigger a denial-of-service attack.
12 Mar 202600:00
bdu_fstec
Chainguard
CVE-2025-61921 vulnerabilities
15 Oct 202520:17
cgr
CNNVD
Sinatra 安全漏洞
10 Oct 202500:00
cnnvd
CVE
CVE-2025-61921
10 Oct 202519:28
cve
Debian CVE
CVE-2025-61921
10 Oct 202519:28
debiancve
EUVD
EUVD-2025-33767
10 Oct 202519:28
euvd
Github Security Blog
Sinatra is vulnerable to ReDoS through ETag header value generation
10 Oct 202520:28
github
NVD
CVE-2025-61921
10 Oct 202520:15
nvd
OSV
CGA-3VM9-X3M9-9C8F
9 Jan 202612:33
osv
Rows per page
[
  {
    "vendor": "sinatra",
    "product": "sinatra",
    "versions": [
      {
        "version": "< 4.2.0",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

10 Oct 2025 19:28Current
CVSS 46.9
EPSS0.00448
8