This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2021-33621 →
DEBIAN-CVE-2021-33621
The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that...
Original description
The description as published by the source.
The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
ruby3.1
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-4"}]}]
References
- advisory security-tracker.debian.org