Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Regular Expression Denial Of Service (ReDoS)

🗓️ 10 Nov 2025 07:01:03Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 8 Views

Sinatra is vulnerable to ReDoS due to inefficient header parsing when the etag method is used, enabling crafted headers to exhaust CPU.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
AstraLinux		Astra Linux – Vulnerability in ruby-sinatra
3 Mar 202609:29
–astralinux
BDU FSTEC		The vulnerability of the Ruby Sinatra web application development framework’s parser allows a attacker to trigger a denial-of-service attack.
12 Mar 202600:00
–bdu_fstec
Chainguard		CVE-2025-61921 vulnerabilities
15 Oct 202520:17
–cgr
CNNVD		Sinatra 安全漏洞
10 Oct 202500:00
–cnnvd
CVE		CVE-2025-61921
10 Oct 202519:28
–cve
Cvelist		CVE-2025-61921 Sinatra has ReDoS vulnerability in ETag header value generation
10 Oct 202519:28
–cvelist
Debian CVE		CVE-2025-61921
10 Oct 202519:28
–debiancve
EUVD		EUVD-2025-33767
10 Oct 202519:28
–euvd
Github Security Blog		Sinatra is vulnerable to ReDoS through ETag header value generation
10 Oct 202520:28
–github
NVD		CVE-2025-61921
10 Oct 202520:15
–nvd
Rows per page
Vulners
Node
OR
sinatrarbsinatraRange0.1.0–4.1.1ruby
sinatrarbsinatraMatch0.1.0ruby
sinatrarbsinatraMatch0.1.5ruby
sinatrarbsinatraMatch0.1.6ruby
sinatrarbsinatraMatch0.1.7ruby
sinatrarbsinatraMatch0.2.0ruby
sinatrarbsinatraMatch0.2.1ruby
sinatrarbsinatraMatch0.2.2ruby
sinatrarbsinatraMatch0.3.0ruby
sinatrarbsinatraMatch0.3.1ruby
sinatrarbsinatraMatch0.3.2ruby
sinatrarbsinatraMatch0.3.3ruby
sinatrarbsinatraMatch0.9.0ruby
sinatrarbsinatraMatch0.9.0.1ruby
sinatrarbsinatraMatch0.9.0.2ruby
sinatrarbsinatraMatch0.9.0.3ruby
sinatrarbsinatraMatch0.9.0.4ruby
sinatrarbsinatraMatch0.9.0.5ruby
sinatrarbsinatraMatch0.9.1ruby
sinatrarbsinatraMatch0.9.1.1ruby
sinatrarbsinatraMatch0.9.2ruby
sinatrarbsinatraMatch0.9.4ruby
sinatrarbsinatraMatch0.9.5ruby
sinatrarbsinatraMatch0.9.6ruby
sinatrarbsinatraMatch1.0ruby
sinatrarbsinatraMatch1.0.aruby
sinatrarbsinatraMatch1.0.bruby
sinatrarbsinatraMatch1.1.0ruby
sinatrarbsinatraMatch1.1.2ruby
sinatrarbsinatraMatch1.1.3ruby
sinatrarbsinatraMatch1.1.4ruby
sinatrarbsinatraMatch1.1.aruby
sinatrarbsinatraMatch1.1.bruby
sinatrarbsinatraMatch1.2.0ruby
sinatrarbsinatraMatch1.2.0.aruby
sinatrarbsinatraMatch1.2.0.cruby
sinatrarbsinatraMatch1.2.0.druby
sinatrarbsinatraMatch1.2.1ruby
sinatrarbsinatraMatch1.2.2ruby
sinatrarbsinatraMatch1.2.3ruby
sinatrarbsinatraMatch1.2.6ruby
sinatrarbsinatraMatch1.2.7ruby
sinatrarbsinatraMatch1.2.8ruby
sinatrarbsinatraMatch1.2.9ruby
sinatrarbsinatraMatch1.3.0ruby
sinatrarbsinatraMatch1.3.0.aruby
sinatrarbsinatraMatch1.3.0.bruby
sinatrarbsinatraMatch1.3.0.cruby
sinatrarbsinatraMatch1.3.0.druby
sinatrarbsinatraMatch1.3.0.eruby
sinatrarbsinatraMatch1.3.0.fruby
sinatrarbsinatraMatch1.3.0.gruby
sinatrarbsinatraMatch1.3.1ruby
sinatrarbsinatraMatch1.3.2ruby
sinatrarbsinatraMatch1.3.3ruby
sinatrarbsinatraMatch1.3.4ruby
sinatrarbsinatraMatch1.3.5ruby
sinatrarbsinatraMatch1.3.6ruby
sinatrarbsinatraMatch1.4.0ruby
sinatrarbsinatraMatch1.4.0.aruby
sinatrarbsinatraMatch1.4.0.bruby
sinatrarbsinatraMatch1.4.0.cruby
sinatrarbsinatraMatch1.4.0.druby
sinatrarbsinatraMatch1.4.1ruby
sinatrarbsinatraMatch1.4.2ruby
sinatrarbsinatraMatch1.4.3ruby
sinatrarbsinatraMatch1.4.4ruby
sinatrarbsinatraMatch1.4.5ruby
sinatrarbsinatraMatch1.4.6ruby
sinatrarbsinatraMatch1.4.7ruby
sinatrarbsinatraMatch1.4.8ruby
sinatrarbsinatraMatch2.0.0ruby
sinatrarbsinatraMatch2.0.0.beta1ruby
sinatrarbsinatraMatch2.0.0.beta2ruby
sinatrarbsinatraMatch2.0.0.rc1ruby
sinatrarbsinatraMatch2.0.0.rc2ruby
sinatrarbsinatraMatch2.0.0.rc5ruby
sinatrarbsinatraMatch2.0.0.rc6ruby
sinatrarbsinatraMatch2.0.1ruby
sinatrarbsinatraMatch2.0.1.rc1ruby
sinatrarbsinatraMatch2.0.2ruby
sinatrarbsinatraMatch2.0.3ruby
sinatrarbsinatraMatch2.0.4ruby
sinatrarbsinatraMatch2.0.5ruby
sinatrarbsinatraMatch2.0.6ruby
sinatrarbsinatraMatch2.0.7ruby
sinatrarbsinatraMatch2.0.8ruby
sinatrarbsinatraMatch2.0.8.1ruby
sinatrarbsinatraMatch2.1.0ruby
sinatrarbsinatraMatch2.2.0ruby
sinatrarbsinatraMatch2.2.1ruby
sinatrarbsinatraMatch2.2.2ruby
sinatrarbsinatraMatch2.2.3ruby
sinatrarbsinatraMatch2.2.4ruby
sinatrarbsinatraMatch3.0.0ruby
sinatrarbsinatraMatch3.0.1ruby
sinatrarbsinatraMatch3.0.2ruby
sinatrarbsinatraMatch3.0.3ruby
sinatrarbsinatraMatch3.0.4ruby
sinatrarbsinatraMatch3.0.5ruby
sinatrarbsinatraMatch3.0.6ruby
sinatrarbsinatraMatch3.1.0ruby
sinatrarbsinatraMatch3.2.0ruby
sinatrarbsinatraMatch4.0.0ruby
sinatrarbsinatraMatch4.0.1ruby
sinatrarbsinatraMatch4.1.0ruby

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 Jun 2026 17:50Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.17.5
CVSS 46.9
EPSS0.00458
SSVC
regular expressiondenial of serviceSinatra vulnerabilityetag headercpu exhaustion
8