CVE-2026-126353

The Addressable library (an alternative to Ruby's standard URI implementation) is vulnerable to a Regular Expression Denial of Service (ReDoS) . In versions 2.3.0 through 2.9.1 , URI template expressions containing multiple exploded variables generate ambiguous regular expressions. Processing an ...