2026-11
“Possible regular expression denial of service with certain configurations of rails-html-sanitizer”
“Possible XSS via shared scrubber state in concurrent rails-html-sanitizer calls”
“REXML has DoS condition when parsing malformed XML file”
“URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+”
“URI Credential Leakage Bypass over CVE-2025-27221”
2026-10
“OS Command Injection in Rake”
“REXML ReDoS vulnerability”
“REXML denial of service vulnerability”
“REXML DoS vulnerability”
“REXML contains a denial of service vulnerability”
“sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity”
“TZInfo relative path traversal vulnerability allows loading of arbitrary files”