UpHeron
All vulnerabilities

Servers and applications

CVE-2019-16201

WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network.

Severity
High 7.5
Published
26 Nov 2019
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
RubyServers and applications · cpe:a:ruby-lang:ruby
  • From 2.4.0 up to 2.4.7
  • From 2.5.0 up to 2.5.6
  • From 2.6.0 up to 2.6.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-16201
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-16201