CVE-2025-27220

Description

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.

Affected Platforms

Weakness Type

CWE-1333, CWE-1333

References

• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cgi/CVE-2025-27220.…
• https://hackerone.com/reports/2890322
• https://lists.debian.org/debian-lts-announce/2025/03/msg00008.html