CVE-2025-27220

Name of the Vulnerable Software and Affected Versions CGI gem versions prior to 0.4.2

Description A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method. This issue can lead to high CPU consumption due to crafted input. The vulnerability affects Ruby versions 3.1 and 3.2.

Recommendations For CGI gem versions prior to 0.4.2, update the CGI gem to version 0.4.2 or later. As a temporary workaround, consider restricting the use of the Util#escapeElement method until a patch is available.