Sinatra — CWE-1333
All Frameworks
›
Sinatra
›
CWE-1333
1 CVEs categorized as
CWE-1333 — Inefficient Regex Complexity (ReDoS)
in
Sinatra
.
CVE-2025-61921
LOW
2025
Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there is a denial of service vulnerability in the `If-Match` and `If-None-Match` header parsing component of Sinatra, if the `etag` method is used when constructing the response. Carefully crafte…