{"action":"Upgrade webrick to 1.8.2 or later.","affected":[{"fixed":"1.8.2","introduced":"0"}],"component":"webrick","cve_ids":["CVE-2025-6442"],"ecosystem":"RubyGems","epss":0.00495,"exploited":false,"fixed_versions":["1.8.2"],"ghsa_id":"GHSA-r995-q44h-hr64","id":"tcs_01M5KEN7HAJXA48HW17024A3E8","modified_at":"2025-06-30T13:26:07.070970Z","published_at":"2025-06-26T21:31:13Z","references":["https://osv.dev/vulnerability/GHSA-r995-q44h-hr64","https://nvd.nist.gov/vuln/detail/CVE-2025-6442","https://github.com/ruby/webrick/commit/ee60354bcb84ec33b9245e1d1aa6e1f7e8132101#diff-ad02984d873efb089aa51551bc6b7d307a53e0ba1ac439e91d69c2e58a478864","https://github.com/ruby/webrick","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/webrick/CVE-2025-6442.yml","https://www.zerodayinitiative.com/advisories/ZDI-25-414"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-r995-q44h-hr64","url":"https://osv.dev/vulnerability/GHSA-r995-q44h-hr64"}],"summary":"Ruby WEBrick read_headers method can lead to HTTP Request/Response Smuggling"}