CVE-2025-27220

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.

• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cgi/CVE-2025-27220.yml
  Third Party Advisory
• https://hackerone.com/reports/2890322
  Permissions Required
• https://lists.debian.org/debian-lts-announce/2025/03/msg00008.html