> CVE-2025-2722

« BACK_TO_HOME
PUBLISHED
2025-03-25 01:15
MODIFIED
2025-04-22 13:15
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 GITHUB 🔗 2026-11-04 OSV 🔗 2026-11-08

> DESCRIPTION

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "[the] call is invalid [because] p_n_param is an input-output parameter indicating how big an array has already been allocated.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-22h5-pq3x-2gf2 LOW

URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+

AFFECTED PACKAGES:
RUBYGEMS / uri
>= 1.0.0, < 1.0.3
Fixed in: 1.0.3
RUBYGEMS / uri
>= 0.13.0, < 0.13.2
Fixed in: 0.13.2
RUBYGEMS / uri
>= 0.12.0, < 0.12.4
Fixed in: 0.12.4
RUBYGEMS / uri
< 0.11.3
Fixed in: 0.11.3

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Debian:11 / libgsf
9 versions affected
Debian:12 / libgsf
7 versions affected
Debian:13 / libgsf
6 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition
25/03/2025 01:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:01
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME