PT-2025-40972 · Ruby · Ruby

Published 2025-10-07 · Updated 2025-10-23 · CVE-2025-61594

Positive Technologies · (AI Summary)

Name of the Vulnerable Software and Affected Versions Ruby versions prior to 3.4.7

Description The URI gem contained a flaw that allowed for credential leakage, bypassing previous fixes. This issue impacts systems utilizing the URI gem and could potentially expose sensitive information.

Recommendations Update to Ruby version 3.4.7 or later. Update the uri gem to the latest version.

Related Identifiers

CVE-2025-61594

Affected Products

Ruby

References · 5

• https://twitter.com/k0kubun/status/1975676002954314147 · Twitter Post
• https://twitter.com/rubylandnews/status/1975657473735372995 · Twitter Post
• https://twitter.com/joserafael/status/1981381586403684363 · Twitter Post
• https://twitter.com/rubylandnews/status/1975370549342667095 · Twitter Post
• https://twitter.com/dev_talk/status/1975389089844064426 · Twitter Post