EUVD-2026-124731

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. Prior to 2.9.1, Addressable::URI.normalizepath repeatedly scans and rewrites paths while removing only one nested dot segment per pass, producing quadratic work. URInormalize,...

CVE-2026-126351

The Addressable library, a Ruby URI implementation, contains a Denial of Service vulnerability in versions prior to 2.9.1 . The root cause is an inefficient path normalization process in Addressable::URI.normalize_path, which repeatedly scans and rewrites paths by removing only one nested dot seg...

CVE-2026-126351 Addressable: Denial of service in URI path normalization

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. Prior to 2.9.1, Addressable::URI.normalizepath repeatedly scans and rewrites paths while removing only one nested dot segment per pass, producing quadratic work. URInormalize,...