Lucene search
K

Regular Expression Denial Of Service (ReDoS)

🗓️ 10 Nov 2025 07:01:03Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 3 Views

Sinatra is vulnerable to ReDoS due to inefficient header parsing when the etag method is used, enabling crafted headers to exhaust CPU.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
AstraLinux
Astra Linux - уязвимость в ruby-sinatra
3 May 202623:59
astralinux
Chainguard
CVE-2025-61921 vulnerabilities
15 Oct 202520:17
cgr
CNNVD
Sinatra 安全漏洞
10 Oct 202500:00
cnnvd
CVE
CVE-2025-61921
10 Oct 202519:28
cve
Cvelist
CVE-2025-61921 Sinatra has ReDoS vulnerability in ETag header value generation
10 Oct 202519:28
cvelist
Debian CVE
CVE-2025-61921
10 Oct 202519:28
debiancve
EUVD
EUVD-2025-33767
10 Oct 202519:28
euvd
Github Security Blog
Sinatra is vulnerable to ReDoS through ETag header value generation
10 Oct 202520:28
github
NVD
CVE-2025-61921
10 Oct 202520:15
nvd
OSV
CGA-3VM9-X3M9-9C8F
9 Jan 202612:33
osv
Rows per page
Vulners
Node
sinatrarbsinatraRange0.1.04.1.1ruby
OR
sinatrarbsinatraMatch0.1.0ruby
OR
sinatrarbsinatraMatch0.1.5ruby
OR
sinatrarbsinatraMatch0.1.6ruby
OR
sinatrarbsinatraMatch0.1.7ruby
OR
sinatrarbsinatraMatch0.2.0ruby
OR
sinatrarbsinatraMatch0.2.1ruby
OR
sinatrarbsinatraMatch0.2.2ruby
OR
sinatrarbsinatraMatch0.3.0ruby
OR
sinatrarbsinatraMatch0.3.1ruby
OR
sinatrarbsinatraMatch0.3.2ruby
OR
sinatrarbsinatraMatch0.3.3ruby
OR
sinatrarbsinatraMatch0.9.0ruby
OR
sinatrarbsinatraMatch0.9.0.1ruby
OR
sinatrarbsinatraMatch0.9.0.2ruby
OR
sinatrarbsinatraMatch0.9.0.3ruby
OR
sinatrarbsinatraMatch0.9.0.4ruby
OR
sinatrarbsinatraMatch0.9.0.5ruby
OR
sinatrarbsinatraMatch0.9.1ruby
OR
sinatrarbsinatraMatch0.9.1.1ruby
OR
sinatrarbsinatraMatch0.9.2ruby
OR
sinatrarbsinatraMatch0.9.4ruby
OR
sinatrarbsinatraMatch0.9.5ruby
OR
sinatrarbsinatraMatch0.9.6ruby
OR
sinatrarbsinatraMatch1.0ruby
OR
sinatrarbsinatraMatch1.0.aruby
OR
sinatrarbsinatraMatch1.0.bruby
OR
sinatrarbsinatraMatch1.1.0ruby
OR
sinatrarbsinatraMatch1.1.2ruby
OR
sinatrarbsinatraMatch1.1.3ruby
OR
sinatrarbsinatraMatch1.1.4ruby
OR
sinatrarbsinatraMatch1.1.aruby
OR
sinatrarbsinatraMatch1.1.bruby
OR
sinatrarbsinatraMatch1.2.0ruby
OR
sinatrarbsinatraMatch1.2.0.aruby
OR
sinatrarbsinatraMatch1.2.0.cruby
OR
sinatrarbsinatraMatch1.2.0.druby
OR
sinatrarbsinatraMatch1.2.1ruby
OR
sinatrarbsinatraMatch1.2.2ruby
OR
sinatrarbsinatraMatch1.2.3ruby
OR
sinatrarbsinatraMatch1.2.6ruby
OR
sinatrarbsinatraMatch1.2.7ruby
OR
sinatrarbsinatraMatch1.2.8ruby
OR
sinatrarbsinatraMatch1.2.9ruby
OR
sinatrarbsinatraMatch1.3.0ruby
OR
sinatrarbsinatraMatch1.3.0.aruby
OR
sinatrarbsinatraMatch1.3.0.bruby
OR
sinatrarbsinatraMatch1.3.0.cruby
OR
sinatrarbsinatraMatch1.3.0.druby
OR
sinatrarbsinatraMatch1.3.0.eruby
OR
sinatrarbsinatraMatch1.3.0.fruby
OR
sinatrarbsinatraMatch1.3.0.gruby
OR
sinatrarbsinatraMatch1.3.1ruby
OR
sinatrarbsinatraMatch1.3.2ruby
OR
sinatrarbsinatraMatch1.3.3ruby
OR
sinatrarbsinatraMatch1.3.4ruby
OR
sinatrarbsinatraMatch1.3.5ruby
OR
sinatrarbsinatraMatch1.3.6ruby
OR
sinatrarbsinatraMatch1.4.0ruby
OR
sinatrarbsinatraMatch1.4.0.aruby
OR
sinatrarbsinatraMatch1.4.0.bruby
OR
sinatrarbsinatraMatch1.4.0.cruby
OR
sinatrarbsinatraMatch1.4.0.druby
OR
sinatrarbsinatraMatch1.4.1ruby
OR
sinatrarbsinatraMatch1.4.2ruby
OR
sinatrarbsinatraMatch1.4.3ruby
OR
sinatrarbsinatraMatch1.4.4ruby
OR
sinatrarbsinatraMatch1.4.5ruby
OR
sinatrarbsinatraMatch1.4.6ruby
OR
sinatrarbsinatraMatch1.4.7ruby
OR
sinatrarbsinatraMatch1.4.8ruby
OR
sinatrarbsinatraMatch2.0.0ruby
OR
sinatrarbsinatraMatch2.0.0.beta1ruby
OR
sinatrarbsinatraMatch2.0.0.beta2ruby
OR
sinatrarbsinatraMatch2.0.0.rc1ruby
OR
sinatrarbsinatraMatch2.0.0.rc2ruby
OR
sinatrarbsinatraMatch2.0.0.rc5ruby
OR
sinatrarbsinatraMatch2.0.0.rc6ruby
OR
sinatrarbsinatraMatch2.0.1ruby
OR
sinatrarbsinatraMatch2.0.1.rc1ruby
OR
sinatrarbsinatraMatch2.0.2ruby
OR
sinatrarbsinatraMatch2.0.3ruby
OR
sinatrarbsinatraMatch2.0.4ruby
OR
sinatrarbsinatraMatch2.0.5ruby
OR
sinatrarbsinatraMatch2.0.6ruby
OR
sinatrarbsinatraMatch2.0.7ruby
OR
sinatrarbsinatraMatch2.0.8ruby
OR
sinatrarbsinatraMatch2.0.8.1ruby
OR
sinatrarbsinatraMatch2.1.0ruby
OR
sinatrarbsinatraMatch2.2.0ruby
OR
sinatrarbsinatraMatch2.2.1ruby
OR
sinatrarbsinatraMatch2.2.2ruby
OR
sinatrarbsinatraMatch2.2.3ruby
OR
sinatrarbsinatraMatch2.2.4ruby
OR
sinatrarbsinatraMatch3.0.0ruby
OR
sinatrarbsinatraMatch3.0.1ruby
OR
sinatrarbsinatraMatch3.0.2ruby
OR
sinatrarbsinatraMatch3.0.3ruby
OR
sinatrarbsinatraMatch3.0.4ruby
OR
sinatrarbsinatraMatch3.0.5ruby
OR
sinatrarbsinatraMatch3.0.6ruby
OR
sinatrarbsinatraMatch3.1.0ruby
OR
sinatrarbsinatraMatch3.2.0ruby
OR
sinatrarbsinatraMatch4.0.0ruby
OR
sinatrarbsinatraMatch4.0.1ruby
OR
sinatrarbsinatraMatch4.1.0ruby

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Dec 2025 08:05Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.17.5
CVSS 46.9
EPSS0.00434
SSVC
3