Commit 4e2781f
taca
www/ruby-cgi: add package version 0.4.2
ruby-cgi contains newer version of cgi gem which is default gem of Ruby.
This package intends to handle these security problem of cgi gem in Ruby.
CVE-2025-27219: Denial of Service in CGI::Cookie.parse
CVE-2025-27220: ReDoS in CGI::Util#escapeElement
CVE-2025-27221: userinfo leakage in URI#join, URI#merge and URI#+
CGI
CGI is a large class, providing several categories of methods, many of which
are mixed in from other modules. Some of the documentation is in this
class, some in the modules CGI::QueryExtension and CGI::HtmlExtension. See
CGI::Cookie for specific information on handling cookies, and cgi/session.rb
(CGI::Session) for information on sessions.
For queries, CGI provides methods to get at environmental variables,
parameters, cookies, and multipart request data. For responses, CGI
provides methods for writing output and generating HTML.1 parent c9286b5 commit 4e2781f
4 files changed
Lines changed: 49 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
0 commit comments