CVE-2025-27221

EUVD-2025-5508
In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.2 LOW
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
Affected Products (NVD)
VendorProductVersion
ruby-languri
𝑥
< 0.11.3
ruby-languri
0.12.0 ≤
𝑥
< 0.12.4
ruby-languri
0.13.0 ≤
𝑥
< 0.13.2
ruby-languri
1.0.0 ≤
𝑥
< 1.0.3
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
jruby
bionic
needs-triage
focal
needs-triage
jammy
dne
noble
needs-triage
oracular
ignored
plucky
ignored
questing
ignored
resolute
needs-triage
trusty
needs-triage
xenial
ignored
ruby2.3
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
xenial
Fixed 2.3.1-2~ubuntu16.04.16+esm10
released
ruby2.5
bionic
Fixed 2.5.1-1ubuntu1.16+esm4
released
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
ruby2.7
focal
Fixed 2.7.0-5ubuntu1.18
released
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
ruby3.0
focal
dne
jammy
Fixed 3.0.2-7ubuntu2.10
released
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
ruby3.2
focal
dne
jammy
dne
noble
Fixed 3.2.3-1ubuntu0.24.04.5
released
oracular
dne
plucky
dne
questing
dne
resolute
dne
ruby3.3
focal
dne
jammy
dne
noble
dne
oracular
Fixed 3.3.4-2ubuntu5.2
released
plucky
Fixed 3.3.7-1ubuntu2
released
questing
Fixed 3.3.7-1ubuntu2
released
resolute
Fixed 3.3.7-1ubuntu2
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libruby2_5-2_5
suse enterprise desktop 15 SP6
2.5.9-150000.4.46.1
fixed
suse enterprise desktop 15 SP7
2.5.9-150700.24.3.1
fixed
suse enterprise sap 15 SP3
2.5.9-150000.4.46.1
fixed
suse enterprise sap 15 SP4
2.5.9-150000.4.46.1
fixed
suse enterprise sap 15 SP5
2.5.9-150000.4.46.1
fixed
suse enterprise sap 15 SP6
2.5.9-150000.4.46.1
fixed
suse enterprise sap 15 SP7
2.5.9-150700.24.3.1
fixed
suse enterprise server 15 SP2
2.5.9-150000.4.46.1
fixed
suse enterprise server 15 SP3
2.5.9-150000.4.46.1
fixed
suse enterprise server 15 SP4
2.5.9-150000.4.46.1
fixed
suse enterprise server 15 SP5
2.5.9-150000.4.46.1
fixed
suse enterprise server 15 SP6
2.5.9-150000.4.46.1
fixed
suse enterprise server 15 SP7
2.5.9-150700.24.3.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
ruby3.2
Amazon Linux 2023
0:3.2.7-183.amzn2023.0.2
fixed
ruby3.2-bundled-gems
Amazon Linux 2023
0:3.2.7-183.amzn2023.0.2
fixed
ruby3.2-bundled-gems-debuginfo
Amazon Linux 2023
0:3.2.7-183.amzn2023.0.2
fixed
ruby3.2-debuginfo
Amazon Linux 2023
0:3.2.7-183.amzn2023.0.2
fixed
ruby3.2-debugsource
Amazon Linux 2023
0:3.2.7-183.amzn2023.0.2
fixed
ruby3.2-default-gems
Amazon Linux 2023
0:3.2.7-183.amzn2023.0.2
fixed
ruby3.2-devel
Amazon Linux 2023
0:3.2.7-183.amzn2023.0.2
fixed
ruby3.2-doc
Amazon Linux 2023
0:3.2.7-183.amzn2023.0.2
fixed
ruby3.2-libs
Amazon Linux 2023
0:3.2.7-183.amzn2023.0.2
fixed
ruby3.2-libs-debuginfo
Amazon Linux 2023
0:3.2.7-183.amzn2023.0.2
fixed
ruby3.2-rubygem-bigdecimal
Amazon Linux 2023
0:3.1.3-183.amzn2023.0.2
fixed
ruby3.2-rubygem-bigdecimal-debuginfo
Amazon Linux 2023
0:3.1.3-183.amzn2023.0.2
fixed
ruby3.2-rubygem-bundler
Amazon Linux 2023
0:2.4.19-183.amzn2023.0.2
fixed
ruby3.2-rubygem-io-console
Amazon Linux 2023
0:0.6.0-183.amzn2023.0.2
fixed
ruby3.2-rubygem-io-console-debuginfo
Amazon Linux 2023
0:0.6.0-183.amzn2023.0.2
fixed
ruby3.2-rubygem-irb
Amazon Linux 2023
0:1.6.2-183.amzn2023.0.2
fixed
ruby3.2-rubygem-json
Amazon Linux 2023
0:2.6.3-183.amzn2023.0.2
fixed
ruby3.2-rubygem-json-debuginfo
Amazon Linux 2023
0:2.6.3-183.amzn2023.0.2
fixed
ruby3.2-rubygem-minitest
Amazon Linux 2023
0:5.25.1-183.amzn2023.0.2
fixed
ruby3.2-rubygem-power_assert
Amazon Linux 2023
0:2.0.3-183.amzn2023.0.2
fixed
ruby3.2-rubygem-psych
Amazon Linux 2023
0:5.0.1-183.amzn2023.0.2
fixed
ruby3.2-rubygem-psych-debuginfo
Amazon Linux 2023
0:5.0.1-183.amzn2023.0.2
fixed
ruby3.2-rubygem-rake
Amazon Linux 2023
0:13.0.6-183.amzn2023.0.2
fixed
ruby3.2-rubygem-rbs
Amazon Linux 2023
0:2.8.2-183.amzn2023.0.2
fixed
ruby3.2-rubygem-rbs-debuginfo
Amazon Linux 2023
0:2.8.2-183.amzn2023.0.2
fixed
ruby3.2-rubygem-rdoc
Amazon Linux 2023
0:6.5.1.1-183.amzn2023.0.2
fixed
ruby3.2-rubygem-rexml
Amazon Linux 2023
0:3.3.9-183.amzn2023.0.2
fixed
ruby3.2-rubygem-rss
Amazon Linux 2023
0:0.3.1-183.amzn2023.0.2
fixed
ruby3.2-rubygem-test-unit
Amazon Linux 2023
0:3.5.7-183.amzn2023.0.2
fixed
ruby3.2-rubygem-typeprof
Amazon Linux 2023
0:0.21.3-183.amzn2023.0.2
fixed
ruby3.2-rubygems
Amazon Linux 2023
0:3.4.19-183.amzn2023.0.2
fixed
ruby3.2-rubygems-devel
Amazon Linux 2023
0:3.4.19-183.amzn2023.0.2
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
ruby
Azure Linux 3.0
0:3.3.5-3.azl3
fixed
CBL-Mariner 2.0
0:3.1.4-9.cm2
fixed
Common Weakness Enumeration
References
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2025-27221.yml
https://hackerone.com/reports/2957667
https://lists.debian.org/debian-lts-announce/2025/03/msg00008.html
https://lists.debian.org/debian-lts-announce/2025/05/msg00015.html