> CVE-2025-2721

« BACK_TO_HOME
PUBLISHED
2025-03-25 00:15
MODIFIED
2025-04-22 13:15
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 GITHUB 🔗 2026-11-04 OSV 🔗 2026-11-08

> DESCRIPTION

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "[the] call is invalid [as] the buffer pointed to by "data" must have "len" valid bytes." The documentation was fixed to make that clear.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-gh9q-2xrm-x6qv MODERATE

CGI has Denial of Service (DoS) potential in Cookie.parse

AFFECTED PACKAGES:
RUBYGEMS / cgi
>= 0.4.0, < 0.4.2
Fixed in: 0.4.2
RUBYGEMS / cgi
= 0.3.6
Fixed in: 0.3.7
RUBYGEMS / cgi
< 0.3.5.1
Fixed in: 0.3.5.1

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Debian:11 / libgsf
9 versions affected
Debian:12 / libgsf
7 versions affected
Debian:13 / libgsf
6 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition
25/03/2025 00:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:01
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME