{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.7.58"}],"component":"iodine","cve_ids":["CVE-2026-41146"],"ecosystem":"RubyGems","epss":0.00365,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2x79-gwq3-vxxm","id":"tcs_01M5KEG21YCDEZ59XPY0PCA80R","modified_at":"2026-06-08T23:30:14.424673010Z","published_at":"2026-04-14T23:41:06Z","references":["https://osv.dev/vulnerability/GHSA-2x79-gwq3-vxxm","https://github.com/boazsegev/facil.io/security/advisories/GHSA-2x79-gwq3-vxxm","https://nvd.nist.gov/vuln/detail/CVE-2026-41146","https://github.com/boazsegev/facil.io/commit/5128747363055201d3ecf0e29bf0a961703c9fa0","https://github.com/boazsegev/facil.io","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/iodine/CVE-2026-41146.yml"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-2x79-gwq3-vxxm","url":"https://osv.dev/vulnerability/GHSA-2x79-gwq3-vxxm"},{"source":"nvd","source_id":"CVE-2026-41146","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41146"}],"summary":"Uncontrolled resource consumption and loop with unreachable exit condition in facil.io and downstream iodine ruby gem"}