Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-27220

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.1%
CVSS Severity
CVSS v3 Score 4.0
Products affected by CVE-2025-27220
  • Ruby-Lang » Cgi » Version: 0.1.0
    cpe:2.3:a:ruby-lang:cgi:0.1.0
  • Ruby-Lang » Cgi » Version: 0.1.1
    cpe:2.3:a:ruby-lang:cgi:0.1.1
  • Ruby-Lang » Cgi » Version: 0.2.0
    cpe:2.3:a:ruby-lang:cgi:0.2.0
  • Ruby-Lang » Cgi » Version: 0.2.1
    cpe:2.3:a:ruby-lang:cgi:0.2.1
  • Ruby-Lang » Cgi » Version: 0.3.0
    cpe:2.3:a:ruby-lang:cgi:0.3.0
  • Ruby-Lang » Cgi » Version: 0.3.1
    cpe:2.3:a:ruby-lang:cgi:0.3.1
  • Ruby-Lang » Cgi » Version: 0.3.6
    cpe:2.3:a:ruby-lang:cgi:0.3.6
  • Ruby-Lang » Cgi » Version: 0.4.0
    cpe:2.3:a:ruby-lang:cgi:0.4.0
  • Ruby-Lang » Cgi » Version: 0.4.1
    cpe:2.3:a:ruby-lang:cgi:0.4.1
  • Ruby-Lang » Ruby » Version: 3.1.0
    cpe:2.3:a:ruby-lang:ruby:3.1.0
  • Ruby-Lang » Ruby » Version: 3.2.0
    cpe:2.3:a:ruby-lang:ruby:3.2.0


Contact Us

Shodan ® - All rights reserved