Lucene search
+L

1 matches found

OSV
OSV
added 2025/12/30 9:15 p.m.6 views

AZL-73356 CVE-2025-61594 affecting package ruby for versions less than 3.3.5-7

URI is a module providing classes to handle Uniform Resource Identifiers. In versions prior to 0.12.5, 0.13.3, and 1.0.4, a bypass exists for the fix to CVE-2025-27221 that can expose user credentials. When using the + operator to combine URIs, sensitive information like passwords from the origin...

7.5CVSS7.3AI score0.0051EPSS
SaveExploits0References1
Rows per page
Query Builder