CVE-2026-113877 | HTTP::Headers::ActionPack up to 0.9 Accept-Language Header _language_match range resource consumption (EUVD-2026-109147)

October 23, 2026 Yanac

A vulnerability identified as problematic has been detected in HTTP::Headers::ActionPack up to 0.9. Affected is the function _language_match of the component Accept-Language Header. The manipulation of the argument range leads to resource consumption.

This vulnerability is traded as CVE-2026-113877. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More