{"uuid": "19a888f2-ae4d-414d-937a-5c6ff25f91b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/216", "content": "\ud83c\udfaf New Report #3013913: [CVE-2025-27219 Denial of Service in CGI::Cookie.parse](https://hackerone.com/reports/3013913)\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: lio346\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-26\n\u23f0 Disclosed: 2025-04-27 14:27:52\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in the CGI::Cookie.parse method of the Ruby cgi gem. The vulnerability was caused by the method taking super-linear time to parse a maliciously crafted cookie string. This could have led to service disruptions. The vulnerability was assigned the CVE identifier CVE-2025-27219.\n  @hackeronereports", "creation_timestamp": "2026-09-15T00:00:27.982065Z"}