CVE-2021-41816

CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 for Ruby.

• Fedora Project Fedora

  OS
  Fedoraproject
  3435

• Ruby Lang Cgi

  APP
  Ruby-Lang
  < 0.3.1≤ 0.1.0≤ 0.2.0

• Ruby Lang Ruby

  APP
  Ruby-Lang
  2.7.0 – 2.7.5 (bez)3.0.0 – 3.0.3 (bez)