addressable (RubyGems) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the RubyGems package addressable, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2021-32740 — CVSS 7.5 (high): Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource…
• CVE-2026-35611 — CVSS 7.5 (high): Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 to before 2.9.0…