{"schemaVersion":3,"id":"CVE-2025-61921","aliases":["UBUNTU-CVE-2025-61921","DEBIAN-CVE-2025-61921","CGA-972v-j928-p2x4","CGA-rxgv-fxx5-mp2c","CGA-289h-hj5f-cp98","CGA-2pxh-wf9v-4fp5","CGA-3h62-78rr-w75v","CGA-3r3x-xw77-6893","CGA-3v7m-m5v4-2j8v","CGA-525x-4cm4-2fr2","CGA-5jxv-7m52-h438","CGA-5pg9-pjgh-6vgj","CGA-5wpp-226v-xr35","CGA-656c-cjmj-qqgq","CGA-6g2j-hx2g-vqq5","CGA-6jf5-33q7-hmh5","CGA-754p-2723-682q","CGA-759v-7xfh-wgv6","CGA-7677-p2gv-8w54","CGA-7m64-r5pw-78rg","CGA-7p37-jj6j-wfv2","CGA-868r-c6cg-9388","CGA-887m-7f4h-v5g4","CGA-8922-pvwq-93h9","CGA-89g8-4992-8pr2","CGA-93x2-428j-jm9h","CGA-9c62-6798-c4qr","CGA-9f63-vwvg-jcxp","CGA-9gxg-m4gc-7qjw","CGA-9mf4-97ff-425p","CGA-9r2r-hvqc-jcgm","CGA-9rmf-j94q-5c9f","CGA-c2gh-h8gg-rp69","CGA-c2jg-qvwg-w82f","CGA-chq8-wg58-qq64","CGA-cwfx-vq5v-8gcx","CGA-ffww-w3qw-28x4","CGA-fg66-2f63-j83m","CGA-fj7x-89gq-q2qg","CGA-fwhf-9h8h-cp27","CGA-g9p8-cwf3-9w7p","CGA-gqfj-x3hh-f5xg","CGA-gw4q-x7qx-r3v5","CGA-h2j6-c9rr-m9r8","CGA-h693-28gm-hrw6","CGA-h6jc-jxr3-q3fr","CGA-hvpg-83cj-m8fx","CGA-j3gp-p269-g93q","CGA-j3rp-q3x9-xvhc","CGA-j85p-gp2g-ggrq","CGA-jm4h-9xwr-25pv","CGA-m766-rx3x-gc22","CGA-m836-grj8-m94w","CGA-mmx9-6599-hwh5","CGA-mrm5-6gc5-h8vj","CGA-p2qg-rvcp-f3rg","GHSA-mr3q-g2mv-mr4q","CGA-q22v-9xfj-f8pf","CGA-q57w-83x5-8x64","CGA-q8hf-48m5-9cg9","CGA-qf3g-ggxr-9wp7","CGA-qgc8-pjph-7269","CGA-qr9g-x3xv-jxp9","CGA-qw2j-35pf-gw67","CGA-r3xm-3fjg-pq87","CGA-r556-r4jf-g5h8","CGA-rgf9-2wm7-pv99","CGA-rjx6-c6h7-jx5p","CGA-rw5p-9mx9-mpqr","CGA-rx4q-c2w3-fwf5","CGA-v462-5mvw-ccp7","CGA-v7j3-r7jx-2c9p","CGA-v9vw-2q83-gwvw","CGA-w6vg-j37c-63p7","CGA-w94r-crr4-v4x4","CGA-wfgx-wj22-wgqc","CGA-wmmf-9hjq-vhg7","CGA-wqwr-2gjw-wc2m","CGA-x4vg-4rr8-gx73","CGA-xcc9-h4gv-4372","CGA-xm3v-mr36-7gwp"],"status":"published","duplicateOf":null,"title":null,"description":"Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there is a denial of service vulnerability in the `If-Match` and `If-None-Match` header parsing component of Sinatra, if the `etag` method is used when constructing the response. Carefully crafted input can cause `If-Match` and `If-None-Match` header parsing in Sinatra to take an unexpected amount of time, possibly resulting in a denial of service attack vector. This header is typically involved in generating the `ETag` header value. Any applications that use the `etag` method when generating a response are impacted. Version 4.2.0 fixes the issue.","dates":{"published":"2025-10-10T19:28:10.688Z","modified":"2025-10-10T20:54:47.627Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":2.7,"severity":"low","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Rubygems","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":2.7,"severity":"low","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00495,"percentile":0.41208,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00495},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00495,"percentile":0.41208}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00495,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00495,"percentile":0.41208}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_SINATRA_SINATRA","name":"Sinatra","source":"github","url":"https://github.com/sinatra/sinatra/issues/1428","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-1333","name":"Inefficient Regular Expression Complexity","description":"The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/1333.html"}],"affected":[{"vendor":"chainguard","product":"gitlab-cng-18.2","name":"gitlab-cng-18.2","label":"gitlab-cng-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-cng-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-cng-18.9","name":"gitlab-cng-18.9","label":"gitlab-cng-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-cng-18.9","purlType":"apk","versions":[{"text":"< 18.9.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.10","name":"gitlab-exporter-18.10","label":"gitlab-exporter-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.11","name":"gitlab-exporter-18.11","label":"gitlab-exporter-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.11","purlType":"apk","versions":[{"text":"< 18.11.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.6","name":"gitlab-exporter-18.6","label":"gitlab-exporter-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.7","name":"gitlab-exporter-18.7","label":"gitlab-exporter-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.8","name":"gitlab-exporter-18.8","label":"gitlab-exporter-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.9","name":"gitlab-exporter-18.9","label":"gitlab-exporter-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.9","purlType":"apk","versions":[{"text":"< 18.9.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-19.0","name":"gitlab-exporter-19.0","label":"gitlab-exporter-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-19.0","purlType":"apk","versions":[{"text":"< 19.0.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-19.1","name":"gitlab-exporter-19.1","label":"gitlab-exporter-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-19.2","name":"gitlab-exporter-19.2","label":"gitlab-exporter-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-19.3","name":"gitlab-exporter-19.3","label":"gitlab-exporter-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-logger-18.2","name":"gitlab-logger-18.2","label":"gitlab-logger-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-logger-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17","name":"logstash-8.17","label":"logstash-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17-compat","name":"logstash-8.17-compat","label":"logstash-8.17-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17-compat","purlType":"apk","versions":[{"text":"< 8.17.10-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17-env2yaml","name":"logstash-8.17-env2yaml","label":"logstash-8.17-env2yaml","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17-env2yaml","purlType":"apk","versions":[{"text":"< 8.17.10-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17-iamguarded-compat","name":"logstash-8.17-iamguarded-compat","label":"logstash-8.17-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.17.10-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17-with-output-opensearch","name":"logstash-8.17-with-output-opensearch","label":"logstash-8.17-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.17.10-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18","name":"logstash-8.18","label":"logstash-8.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18","purlType":"apk","versions":[{"text":"< 8.18.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18-compat","name":"logstash-8.18-compat","label":"logstash-8.18-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18-compat","purlType":"apk","versions":[{"text":"< 8.18.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18-env2yaml","name":"logstash-8.18-env2yaml","label":"logstash-8.18-env2yaml","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18-env2yaml","purlType":"apk","versions":[{"text":"< 8.18.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18-iamguarded-compat","name":"logstash-8.18-iamguarded-compat","label":"logstash-8.18-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.18.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18-with-output-opensearch","name":"logstash-8.18-with-output-opensearch","label":"logstash-8.18-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.18.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19","name":"logstash-8.19","label":"logstash-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19","purlType":"apk","versions":[{"text":"< 8.19.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-compat","name":"logstash-8.19-compat","label":"logstash-8.19-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-compat","purlType":"apk","versions":[{"text":"< 8.19.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-env2yaml","name":"logstash-8.19-env2yaml","label":"logstash-8.19-env2yaml","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-env2yaml","purlType":"apk","versions":[{"text":"< 8.19.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-iamguarded-compat","name":"logstash-8.19-iamguarded-compat","label":"logstash-8.19-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.19.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-with-output-opensearch","name":"logstash-8.19-with-output-opensearch","label":"logstash-8.19-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.19.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0","name":"logstash-9.0","label":"logstash-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0","purlType":"apk","versions":[{"text":"< 9.0.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0-compat","name":"logstash-9.0-compat","label":"logstash-9.0-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0-compat","purlType":"apk","versions":[{"text":"< 9.0.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0-env2yaml","name":"logstash-9.0-env2yaml","label":"logstash-9.0-env2yaml","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0-env2yaml","purlType":"apk","versions":[{"text":"< 9.0.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0-iamguarded-compat","name":"logstash-9.0-iamguarded-compat","label":"logstash-9.0-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.0.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0-with-output-opensearch","name":"logstash-9.0-with-output-opensearch","label":"logstash-9.0-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.0.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1","name":"logstash-9.1","label":"logstash-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1","purlType":"apk","versions":[{"text":"< 9.1.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-bitnami-compat","name":"logstash-9.1-bitnami-compat","label":"logstash-9.1-bitnami-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-bitnami-compat","purlType":"apk","versions":[{"text":"< 9.1.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-compat","name":"logstash-9.1-compat","label":"logstash-9.1-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-compat","purlType":"apk","versions":[{"text":"< 9.1.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-env2yaml","name":"logstash-9.1-env2yaml","label":"logstash-9.1-env2yaml","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-env2yaml","purlType":"apk","versions":[{"text":"< 9.1.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-iamguarded-compat","name":"logstash-9.1-iamguarded-compat","label":"logstash-9.1-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.1.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-with-output-opensearch","name":"logstash-9.1-with-output-opensearch","label":"logstash-9.1-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.1.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.5-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-cng-18.2","name":"gitlab-cng-18.2","label":"gitlab-cng-18.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-cng-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"ruby-sinatra","name":"ruby-sinatra","label":"ruby-sinatra","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/ruby-sinatra","purlType":"deb","versions":[{"text":"< 3.0.5-3+deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 4.2.1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.5-3+deb12u1 | All versions (No fix recorded) | < 4.2.1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ruby-sinatra","name":"ruby-sinatra","label":"ruby-sinatra","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby-sinatra","purlType":"deb","versions":[{"text":"< 1.4.7-3ubuntu0.1~esm3","noFixRecorded":false,"fixedIn":null},{"text":"< 1.4.8-1ubuntu0.1~esm3","noFixRecorded":false,"fixedIn":null},{"text":"< 2.0.8.1-2+deb11u1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.2.1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.7-3ubuntu0.1~esm3 | < 1.4.8-1ubuntu0.1~esm3 | < 2.0.8.1-2+deb11u1ubuntu0.1~esm1 | < 4.2.1-1","eol":null,"hubHref":null},{"vendor":"RubyGems","product":"sinatra","name":"sinatra","label":"sinatra","ecosystem":"RubyGems","cpePart":null,"purl":"pkg:gem/sinatra","purlType":"gem","versions":[{"text":"< 4.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.0","eol":null,"hubHref":null},{"vendor":"sinatra","product":"sinatra","name":"sinatra","label":"sinatra","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.0","eol":null,"hubHref":"/vendor/sinatra/sinatra"},{"vendor":"sinatrarb","product":"sinatra","name":"sinatra","label":"sinatra","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.0","eol":null,"hubHref":"/vendor/sinatrarb/sinatra"}],"affectedCount":45,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/sinatra/sinatra/security/advisories/GHSA-mr3q-g2mv-mr4q","label":"github.com/sinatra/sinatra/security/advisories/GHSA-mr3q-g2mv-mr4q","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Vendor Advisory"]},{"url":"https://github.com/sinatra/sinatra/issues/2120","label":"github.com/sinatra/sinatra/issues/2120","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB","Issue Tracking"]},{"url":"https://github.com/sinatra/sinatra/pull/1823","label":"github.com/sinatra/sinatra/pull/1823","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Exploit","Patch"]},{"url":"https://github.com/sinatra/sinatra/pull/2121","label":"github.com/sinatra/sinatra/pull/2121","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Patch"]},{"url":"https://bugs.ruby-lang.org/issues/19104","label":"bugs.ruby-lang.org/issues/19104","hostname":"bugs.ruby-lang.org","tags":["X Refsource MISC","WEB","Issue Tracking"]},{"url":"https://ubuntu.com/security/CVE-2025-61921","label":"ubuntu.com/security/CVE-2025-61921","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61921","label":"www.cve.org/CVERecord?id=CVE-2025-61921","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-8624-1","label":"ubuntu.com/security/notices/USN-8624-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-61921","label":"security-tracker.debian.org/tracker/CVE-2025-61921","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61921.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61921.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61921","label":"nvd.nist.gov/vuln/detail/CVE-2025-61921","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/sinatra/sinatra/commit/3fe8c38dc405586f7ad8f2ac748aa53e9c3615bd","label":"github.com/sinatra/sinatra/commit/3fe8c38dc405586f7ad8f2ac748aa53e9c3615bd","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/sinatra/sinatra/commit/8ff496bd4877520599e1479d6efead39304edceb","label":"github.com/sinatra/sinatra/commit/8ff496bd4877520599e1479d6efead39304edceb","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sinatra/CVE-2025-61921.yml","label":"github.com/rubysec/ruby-advisory-db/blob/master/gems/sinatra/CVE-2025-61921.yml","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/sinatra/sinatra","label":"github.com/sinatra/sinatra","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-3VM9-X3M9-9C8F","CGA-FH64-7FGF-RQXC","CGA-FMPG-P83W-XXGP","CGA-P74X-XM9V-GMGW","CGA-V9R5-6H2X-JJ2P","USN-8624-1"]},"timeline":[{"kind":"published","date":"2025-10-10T19:28:10.688Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-10-10T20:54:47.627Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":40,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:18:49.847Z","stale":false,"partial":false}}