rack

Records42All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high23CVSS 7.0–8.9

Exploited now

rack records in CISA KEV

No rack vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Rack-session · all components

TI-2026-28312 CVE-2026-39324 · GHSA-33qg-7wpp-89cq

MEDIUM 48

Rack::Session is a session management implementation for Rack.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00274 Published 2026-04-07 Fixed in 2.1.2 CWE-287