{"vulnerability": "cve-2025-27219", "sightings": [{"uuid": "df8e5e03-52e1-4166-b2a3-cba754d38b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljjhmo7c3l2n", "content": "", "creation_timestamp": "2025-03-04T02:54:48.163333Z"}, {"uuid": "3a41715a-4c90-4941-b2e1-ebf59ac3bc86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-27219", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "94e19b22-389f-4a50-bdb6-b73b1beb6001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "seen", "source": "https://t.me/cvedetector/19433", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27219 - Apache CGI Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27219 \nPublished : March 4, 2025, 12:15 a.m. | 18\u00a0minutes ago \nDescription : In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T01:36:54.000000Z"}, {"uuid": "0bf14e6c-e306-4ee6-8160-8c97be15ed78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6302", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27219\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L)\n\ud83d\udd39 Description: In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T23:38:00.413Z\n\ud83d\udd17 References:\n1. https://hackerone.com/reports/2936778\n2. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cgi/CVE-2025-27219.yml", "creation_timestamp": "2025-03-04T00:31:07.000000Z"}, {"uuid": "74229fa8-a58d-41f1-bec8-be4d49e2bd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/216", "content": "\ud83c\udfaf New Report #3013913: [CVE-2025-27219 Denial of Service in CGI::Cookie.parse](https://hackerone.com/reports/3013913)\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: lio346\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-26\n\u23f0 Disclosed: 2025-04-27 14:27:52\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in the CGI::Cookie.parse method of the Ruby cgi gem. The vulnerability was caused by the method taking super-linear time to parse a maliciously crafted cookie string. This could have led to service disruptions. The vulnerability was assigned the CVE identifier CVE-2025-27219.\n  @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.590734Z"}, {"uuid": "19a888f2-ae4d-414d-937a-5c6ff25f91b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/216", "content": "\ud83c\udfaf New Report #3013913: [CVE-2025-27219 Denial of Service in CGI::Cookie.parse](https://hackerone.com/reports/3013913)\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: lio346\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-26\n\u23f0 Disclosed: 2025-04-27 14:27:52\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in the CGI::Cookie.parse method of the Ruby cgi gem. The vulnerability was caused by the method taking super-linear time to parse a maliciously crafted cookie string. This could have led to service disruptions. The vulnerability was assigned the CVE identifier CVE-2025-27219.\n  @hackeronereports", "creation_timestamp": "2026-09-15T00:00:27.982065Z"}]}