CVE-2026-126353

The Addressable library (an alternative to Ruby's standard URI implementation) is vulnerable to a Regular Expression Denial of Service (ReDoS) . In versions 2.3.0 through 2.9.1 , URI template expressions containing multiple exploded variables generate ambiguous regular expressions. Processing an ...

CVE-2026-126352

The Addressable Ruby gem (versions 2.3.0 through 2.9.1) is vulnerable to a Regular Expression Denial of Service (ReDoS) . The root cause is that URI templates containing multiple variables in a single expression or adjacent expressions generate ambiguous regular expressions. Specifically, Templat...

CVE-2026-126350

The Addressable library (an alternative to Ruby's standard URI implementation) is vulnerable to a Regular Expression Denial of Service (ReDoS) . In versions 2.3.0 until 2.9.1 , URI template expressions using the explode modifier with slash, dot, semicolon, question-mark, or ampersand operators ge...

libxslt: fixed-sized steps array overflow via "template match" condition in XSL file

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps...