LOW3.2RubyGems
GHSA-22h5-pq3x-2gf2· CVE-2025-27221URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+
Modified: 9/10/2026
package
RubyGems/uri
pkg:rubygems/uri
HIGH7.5RubyGems
GHSA-hv5j-3h9f-99c2· CVE-2023-28755Ruby URI component ReDoS issue
Modified: 9/10/2026
MEDIUM5.3RubyGems
GHSA-hww2-5g85-429m· CVE-2023-36617URI gem has ReDoS vulnerability
Modified: 9/10/2026
HIGH7.5RubyGems
GHSA-j4pr-3wm6-xx2r· CVE-2025-61594URI Credential Leakage Bypass over CVE-2025-27221
Modified: 9/10/2026