Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-27221
3.2
LOWCVSS v3
Published
March 4, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.
ruby/uri
GitHubURI is a module providing classes to handle Uniform Resource Identifiers
GitHubURI is a module providing classes to handle Uniform Resource Identifiers< 0.11.3, >= 0.12.0, < 0.12.4, >= 0.13.0, < 0.13.2, >= 1.0.0, < 1.0.3NVD