CVE-2026-126354 | sporkmonger Addressable up to 2.9.0 URI.normalize_path improper authorization

A vulnerability, which was classified as critical, was found in sporkmonger Addressable up to 2.9.0. The impacted element is the function Addressable::URI.normalize_path. Executing a manipulation can lead to improper authorization.

The identification of this vulnerability is CVE-2026-126354. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More