CVE-2026-126352

The Addressable Ruby gem (versions 2.3.0 through 2.9.1) is vulnerable to a Regular Expression Denial of Service (ReDoS) . The root cause is that URI templates containing multiple variables in a single expression or adjacent expressions generate ambiguous regular expressions. Specifically, Templat...

CVE-2026-126350

The Addressable library (an alternative to Ruby's standard URI implementation) is vulnerable to a Regular Expression Denial of Service (ReDoS) . In versions 2.3.0 until 2.9.1 , URI template expressions using the explode modifier with slash, dot, semicolon, question-mark, or ampersand operators ge...