addressable
RubyGems6 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting addressablepage 1 of 1
- CVE-2021-32740HIGHCVSS 7.5EG 7.5fixed in 2.8.02021-07-06
vulnerable: 2.3.2 ... 2.7.0 (13 versions)
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template im…
- CVE-2026-126350MEDIUMCVSS 5.9EG 5.9fixed in 2.9.12026-11-12
vulnerable: 2.3.2 ... 2.9.0 (25 versions)
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 until 2.9.1, URI template expressions using the explode modifier with the slash, dot, semicolon, question-mark, or a…
- CVE-2026-126351MEDIUMCVSS 5.9EG 5.9fixed in 2.9.12026-11-12
vulnerable: 0.1.0 ... 2.9.0 (48 versions)
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. Prior to 2.9.1, Addressable::URI.normalize_path repeatedly scans and rewrites paths while removing only one nested dot segment …
- CVE-2026-126352MEDIUMCVSS 5.9EG 5.9fixed in 2.9.12026-11-12
vulnerable: 2.3.2 ... 2.9.0 (25 versions)
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 until 2.9.1, URI templates with several variables in one expression or several adjacent expressions generate ambiguo…
- CVE-2026-126354MEDIUMCVSS 4.8EG 4.8fixed in 2.9.12026-11-12
vulnerable: 2.2.5 ... 2.9.0 (29 versions)
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.2.5 until 2.9.1, Addressable::URI.normalize_path can resolve a path containing leading parent segments and later parent …
- CVE-2026-35611HIGHCVSS 7.5EG 7.5fixed in 2.9.02026-04-07
vulnerable: 2.3.2 ... 2.8.9 (24 versions)
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 to before 2.9.0, within the URI template implementation in Addressable, two classes of URI template generate regular…
Check whether addressable is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for addressable CVEs against the assets you own.
Book a Demo →