rubygem-rack vulnerabilities (Red Hat)
232 vulnerabilities.
-
rubygem-rackRed Hat Foreman: os command injection via ct_location and fcct_location parameters 8.0 High -
rubygem-rackRed Hat Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing 7.5 High -
rubygem-rackRed Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
rubygem-rackRed Hat Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters 7.5 High -
rubygem-rackRed Hat Unbounded-Parameter DoS in Rack::QueryParser 7.5 High -
rubygem-rackRed Hat Remote code execution when loading a crafted GraphQL schema 9.1 Critical -
rubygem-rackRed Hat Local File Inclusion in Rack::Static 7.5 High -
rubygem-rackRed Hat Django has a potential denial-of-service vulnerability in IPv6 validation 5.8 Medium -
rubygem-rackRed Hat Jinja has a sandbox breakout through indirect reference to format method 5.4 Medium -
rubygem-rackRed Hat Jinja has a sandbox breakout through malicious filenames 5.4 Medium -
rubygem-rackRed Hat Foreman: read-only access to entire db from templates 6.3 Medium -
rubygem-rackRed Hat Memory leak 7.2 High -
rubygem-rackRed Hat Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore 9.8 Critical -
rubygem-rackRed Hat Puppet-foreman: an authentication bypass vulnerability exists in foreman 9.8 Critical -
rubygem-rackRed Hat Django SQL injection vulnerability 7.3 High -
rubygem-rackRed Hat HPACK table poisoning in gRPC C++, Python & Ruby 6.3 Medium -
rubygem-rackRed Hat Django vulnerable to Denial of Service 7.5 High -
rubygem-rackRed Hat Django Path Traversal vulnerability 4.3 Medium -
rubygem-rackRed Hat Django vulnerable to user enumeration attack 5.3 Medium -
rubygem-rackRed Hat Django vulnerable to Denial of Service 7.5 High -
rubygem-rackRed Hat Denial of Service via crafted zip file in jaraco/zipp 6.2 Medium -
rubygem-rackRed Hat Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
rubygem-rackRed Hat Regular Expression Denial of Service in micromatch 5.3 Medium -
rubygem-rackRed Hat cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the... 7.6 High -
rubygem-rackRed Hat Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. 7.5 High -
rubygem-rackRed Hat node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation 6.5 Medium -
rubygem-rackRed Hat Rack ReDos in content type parsing (2nd degree polynomial) 5.3 Medium -
rubygem-rackRed Hat Possible DoS Vulnerability with Range Header in Rack 5.8 Medium -
rubygem-rackRed Hat Possible Denial of Service Vulnerability in Rack Header Parsing 5.3 Medium -
rubygem-rackRed Hat Possible Sensitive Session Information Leak in Active Storage 5.3 Medium -
rubygem-rackRed Hat python-ecdsa vulnerable to Minerva attack on P-256 7.4 High -
rubygem-rackRed Hat cJSON v1.7.16 was discovered to contain a segmentation violation via the function... 7.5 High -
rubygem-rackRed Hat cJSON v1.7.16 was discovered to contain a segmentation violation via the function... 7.5 High -
rubygem-rackRed Hat HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
rubygem-rackRed Hat Os command injection via ct_command and fcct_command 8.0 High -
rubygem-rackRed Hat Foreman: arbitrary code execution through templates 9.1 Critical -
rubygem-rackRed Hat Foreman: stored cross-site scripting in host tab 5.4 Medium -
rubygem-rackRed Hat GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments 9.8 Critical -
rubygem-rackRed Hat Insufficient sanitization of Host header in net/http 6.5 Medium -
rubygem-rackRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
rubygem-rackRed Hat Django has regular expression denial of service vulnerability in EmailValidator/URLValidator 7.5 High -
rubygem-rackRed Hat Unintended leak of Proxy-Authorization header in requests 6.1 Medium -
rubygem-rackRed Hat A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2... 5.3 Medium -
rubygem-rackRed Hat Django bypasses validation when using one form field to upload multiple files 9.8 Critical -
rubygem-rackRed Hat Parser contains an inefficient regular expression in sqlparse 5.5 Medium -
rubygem-rackRed Hat jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode 7.5 High -
rubygem-rackRed Hat Possible Denial of Service Vulnerability in Rack's header parsing 5.3 Medium -
rubygem-rackRed Hat Rack has possible DoS Vulnerability in Multipart MIME parsing 7.5 High -
rubygem-rackRed Hat Resource exhaustion in Django 7.5 High -
rubygem-rackRed Hat Django contains Uncontrolled Resource Consumption via cached header 7.5 High - Show olderLoading…