CVE-2025-61780: Ruby Unescaped Regex Prefix Stripping

Unescaped regular expression interpolation can lead to unexpected regex matching failures if the interpolated string contains regex metacharacters. When stripping absolute path prefixes, this bug causes the full literal prefix to fail to match, causing paths to be tracked or disclosed unchanged. This can lead to absolute path information exposure. Use `Regex

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Ruby
greprules fetch cve-2025-61780-ruby-unescaped-regex-prefix-stripping --engine opengrep

Description

Unescaped regular expression interpolation can lead to unexpected regex matching failures if the interpolated string contains regex metacharacters. When stripping absolute path prefixes, this bug causes the full literal prefix to fail to match, causing paths to be tracked or disclosed unchanged. This can lead to absolute path information exposure. Use `Regex