Vulnerabilities

TI-2026-28312 CVE-2026-39324 · GHSA-33qg-7wpp-89cq

Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization

MEDIUM 48

Rack::Session is a session management implementation for Rack.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00274 Published 2026-04-07 Fixed in 2.1.2 CWE-287

TI-2026-21447 CVE-2026-26962 · GHSA-rx22-g9mx-qrhv

Rack: Header injection in multipart requests

LOW 28

Rack is a modular Ruby web server interface.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00235 Published 2026-04-02 Partial fix · 3.2.6 CWE-93

TI-2026-27079 CVE-2026-34835 · GHSA-g2pf-xv49-m2h5

Rack: `Rack::Request` accepts invalid Host characters, enabling host allowlist bypass.

LOW 28

Rack is a modular Ruby web server interface.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.002 Published 2026-04-02 Partial fix · 3.1.21, 3.2.6 CWE-1286

TI-2026-27071 CVE-2026-34827 · GHSA-v6x5-cg8r-vv6x

Rack: Algorithmic-Complexity DoS in Rack::Multipart::Parser

LOW 39

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00494 Published 2026-04-02 Partial fix · 3.1.21, 3.2.6 CWE-400

TI-2026-25253 CVE-2026-32762 · GHSA-qfgr-crr9-7r49

Rack: Forwarded Header semicolon injection enables Host and Scheme spoofing

LOW 28

Rack is a modular Ruby web server interface.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00186 Published 2026-04-02 Partial fix · 3.1.21, 3.2.6 CWE-436

TI-2026-27074 CVE-2026-34830 · GHSA-qv7j-4883-hwh7

Rack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginx

LOW 32

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00243 Published 2026-04-02 Partial fix · 2.2.23, 3.1.21 +1 CWE-625

TI-2026-27073 CVE-2026-34829 · GHSA-8vqr-qjwx-82mw

Rack: Denial of Service via Unbounded Multipart File Upload Without Content-Length

LOW 39

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00375 Published 2026-04-02 Partial fix · 2.2.23, 3.1.21 +1 CWE-400

TI-2026-27070 CVE-2026-34826 · GHSA-x8cg-fq8g-mxfx

Rack: Unbounded Range Count in get_byte_ranges Enables DoS

LOW 39

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00395 Published 2026-04-02 Partial fix · 2.2.23, 3.1.21 +1 CWE-400

TI-2026-27030 CVE-2026-34786 · GHSA-q4qf-9j86-f5mh

Rack: Rack::Static header_rules bypass via URL-encoded paths

LOW 29

Rack is a modular Ruby web server interface.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00202 Published 2026-04-02 Partial fix · 2.2.23, 3.1.21 +1 CWE-180

TI-2026-27029 CVE-2026-34785 · GHSA-h2jq-g4cq-5ppq

Rack: Local file inclusion in `Rack::Static` via URL Prefix Matching

LOW 39

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00394 Published 2026-04-02 Fixed in 2.2.23, 3.1.21 +1 CWE-187

TI-2026-27007 CVE-2026-34763 · GHSA-7mqq-6cf9-v2qp

Rack: Rack::Directory info disclosure and DoS via unescaped regex interpolation

LOW 30

Rack is a modular Ruby web server interface.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0025 Published 2026-04-02 Partial fix · 2.2.23, 3.1.21 +1 CWE-625

TI-2026-27075 CVE-2026-34831 · GHSA-q2ww-5357-x388

Rack: Content-Length mismatch in Rack::Files error responses

LOW 28

Rack is a modular Ruby web server interface.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00152 Published 2026-04-02 Partial fix · 2.2.23, 3.1.21 +1 CWE-130

TI-2026-21446 CVE-2026-26961 · GHSA-vgpv-f759-9wx3

Rack: Multipart Boundary Parsing Ambiguity allowing WAF Bypass

LOW 24

Rack is a modular Ruby web server interface.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00262 Published 2026-04-02 Fixed in 2.2.23, 3.1.21 +1 CWE-436

TI-2026-26525 CVE-2026-34230 · GHSA-v569-hp3g-36wr

Rack: Quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header

LOW 39

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00447 Published 2026-04-02 Partial fix · 2.2.23, 3.1.21 +1 CWE-400

TI-2026-20611 CVE-2026-25500 · GHSA-whrj-4476-wvmp

Rack's Stored XSS in Rack::Directory via javascript: filenames rendered into anchor href

LOW 24

Rack is a modular Ruby web server interface.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00269 Published 2026-02-18 Partial fix · 2.2.22, 3.1.20 +1 CWE-79

TI-2026-18352 CVE-2026-22860 · GHSA-mxw3-3hh2-x2mh

Rack has a Directory Traversal via Rack:Directory

MEDIUM 40

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00763 Published 2026-02-18 Partial fix · 2.2.22, 3.1.20 +1 CWE-22

TI-2025-38268 CVE-2025-61919 · GHSA-6xw4-3v39-52mm

Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing

LOW 34

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00648 Published 2025-10-10 Partial fix · 2.2.20, 3.1.18 +1 CWE-400

TI-2025-38173 CVE-2025-61780 · GHSA-r657-rxjc-j557

Rack has Possible Information Disclosure Vulnerability

LOW 33

Rack is a modular Ruby web server interface.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00553 Published 2025-10-10 Partial fix · 2.2.20, 3.1.18 +1 CWE-200

TI-2025-38165 CVE-2025-61772 · GHSA-wpv5-97wm-hp9c

Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)

MEDIUM 41

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0093 Published 2025-10-07 Partial fix · 2.2.19, 3.1.17 +1 CWE-400

TI-2025-38164 CVE-2025-61771 · GHSA-w9pc-fmgc-vxvw

Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)

MEDIUM 40

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2025-10-07 Partial fix · 2.2.19, 3.1.17 +1 CWE-400

TI-2025-38163 CVE-2025-61770 · GHSA-p543-xpfm-54cp

Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)

MEDIUM 41

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0093 Published 2025-10-07 Partial fix · 2.2.19, 3.1.17 +1 CWE-400

TI-2025-37269 CVE-2025-59830 · GHSA-625h-95r8-8xpm

Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters

MEDIUM 40

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2025-09-25 Partial fix · 2.2.18 CWE-400

TI-2025-31135 CVE-2025-49007 · GHSA-47m2-26rw-j2jw

ReDoS Vulnerability in Rack::Multipart handle_mime_head

LOW 36

Rack is a modular Ruby web server interface.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00584 Published 2025-06-04 Partial fix · 3.1.16 CWE-770

TI-2025-29077 CVE-2025-46336 · GHSA-9j94-67jr-4cqj

Rack session gets restored after deletion

LOW 20

Rack::Session is a session management implementation for Rack.

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00388 Published 2025-05-08 Partial fix · 2.1.1 CWE-362

TI-2025-29398 CVE-2025-46727 · GHSA-gjh7-p2fx-99vx

Unbounded-Parameter DoS in Rack::QueryParser

MEDIUM 41

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01228 Published 2025-05-07 Partial fix · 2.2.14, 3.0.16 +1 CWE-400

Vulnerabilities

Filters