Sinatra — CWE-1333

All FrameworksSinatraCWE-1333

1 CVEs categorized as CWE-1333 — Inefficient Regex Complexity (ReDoS) in Sinatra.

CVE-2025-61921LOW2025
Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there is a denial of service vulnerability in the `If-Match` and `If-None-Match` header parsing component of Sinatra, if the `etag` method is used when constructing the response. Carefully crafte…