PT-2026-80530 — Julia Ruby Jll

PT-2026-80530 · Julia · Ruby Jll

Published

2026-08-13

Updated

2026-08-13

CVSS v3.1

7.5

High

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

JLSEC-2026-1288

Ruby Jll