CVE-2026-35611

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 to before 2.9.0, within the URI template implementation in Addressable, two classes of URI template generate regular expressions vulnerable to catastrophic backtracking...

PT-2026-30806

Name of the Vulnerable Software and Affected Versions Rack::Session versions 2.0.0 through 2.1.1 Description Rack::Session is a session management implementation for Rack. Versions 2.0.0 through 2.1.1 incorrectly handle decryption failures when configured with secrets. If cookie decryption fails,...

CVE-2026-35611: Inefficient Regular Expression Complexity

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 to before 2.9.0, within the URI template implementation in Addressable, two classes of URI template generate regular expressions vulnerable to catastrophic backtracking...

Addressable security vulnerabilities

Addressable is a Ruby library developed by Bob Aman. Versions of Addressable from 2.3.0 to 2.9.0 contained a security vulnerability. This vulnerability stemmed from the URI template implementation; two types of regular expressions generated by the URI templates had catastrophic backtracking, whic...

CVE-2026-34230 vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

CVE-2026-34763 vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

CVE-2026-34829 vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

GHSA-Q2WW-5357-X388 vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

GHSA-QV7J-4883-HWH7 vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

GHSA-V569-HP3G-36WR vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

GHSA-X8CG-FQ8G-MXFX vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

CVE-2026-26961 vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

CVE-2026-34786 vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

CVE-2026-34826 vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

GHSA-7MQQ-6CF9-V2QP vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

GHSA-8VQR-QJWX-82MW vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

CVE-2026-34831 vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

GHSA-H2JQ-G4CQ-5PPQ vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

GHSA-Q4QF-9J86-F5MH vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...

GHSA-VGPV-F759-9WX3 vulnerabilities

Vulnerabilities for packages: gitlab-cng, pact-broker-docker, pact-broker-docker-fips, ruby4.0-rack, ruby3.2-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.2-rack, logstash...