CVE-2026-126351 | sporkmonger Addressable up to 2.9.0 Path Normalization URI.normalize_path denial of service

November 13, 2026 Yanac

A vulnerability labeled as problematic has been found in sporkmonger Addressable up to 2.9.0. Affected by this issue is the function Addressable::URI.normalize_path of the component Path Normalization. Executing a manipulation can lead to denial of service.

This vulnerability appears as CVE-2026-126351. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More