CVE-2026-126352

The Addressable Ruby gem (versions 2.3.0 through 2.9.1) is vulnerable to a Regular Expression Denial of Service (ReDoS) . The root cause is that URI templates containing multiple variables in a single expression or adjacent expressions generate ambiguous regular expressions. Specifically, Templat...