Medium severity6.1NVD Advisory· Published May 7, 2026· Updated May 8, 2026
CVE-2025-67202
CVE-2025-67202
Description
Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL being rended from cron.erb.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
sidekiq-cronRubyGems | < 2.4.0 | 2.4.0 |
Affected products
2Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-xv9c-mjw8-79gfghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-67202ghsaADVISORY
- github.com/rubysec/ruby-advisory-db/blob/master/gems/sidekiq-cron/CVE-2025-67202.ymlghsaWEB
- github.com/sidekiq-cron/sidekiq-cron/commit/7b4ae4822f93ef4646f5cb55500ca4e25662db7cghsaWEB
- github.com/sidekiq-cron/sidekiq-cron/issues/569nvdWEB
- github.com/sidekiq-cron/sidekiq-cron/pull/568ghsaWEB
- github.com/sidekiq-cron/sidekiq-cron/releases/tag/v2.4.0nvdWEB
News mentions
0No linked articles in our index yet.