rack vulnerabilities (RubyGems)
50 vulnerabilities.
-
rackRubyGems Rack: Header injection in multipart requests 4.8 Medium -
rackRubyGems Rack: `Rack::Request` accepts invalid Host characters, enabling host allowlist bypass. 4.8 Medium -
rackRubyGems Rack: Algorithmic-Complexity DoS in Rack::Multipart::Parser 7.5 High -
rackRubyGems Rack: Forwarded Header semicolon injection enables Host and Scheme spoofing 4.8 Medium -
rackRubyGems Rack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginx 5.9 Medium -
rackRubyGems Rack: Denial of Service via Unbounded Multipart File Upload Without Content-Length 7.5 High -
rackRubyGems Rack: Unbounded Range Count in get_byte_ranges Enables DoS 5.3 Medium -
rackRubyGems Rack: Rack::Static header_rules bypass via URL-encoded paths 5.3 Medium -
rackRubyGems Rack: Local file inclusion in `Rack::Static` via URL Prefix Matching 7.5 High -
rackRubyGems Rack: Rack::Directory info disclosure and DoS via unescaped regex interpolation 5.3 Medium -
rackRubyGems Rack: Content-Length mismatch in Rack::Files error responses 4.8 Medium -
rackRubyGems Rack: Multipart Boundary Parsing Ambiguity allowing WAF Bypass 3.7 Low -
rackRubyGems Rack: Quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header 5.3 Medium -
rackRubyGems Rack's Stored XSS in Rack::Directory via javascript: filenames rendered into anchor href 5.4 Medium -
rackRubyGems Rack has a Directory Traversal via Rack:Directory 7.5 High -
rackRubyGems Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing 7.5 High -
rackRubyGems Rack has Possible Information Disclosure Vulnerability 5.8 Medium -
rackRubyGems Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion) 7.5 High -
rackRubyGems Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion) 7.5 High -
rackRubyGems Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) 7.5 High -
rackRubyGems Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters 7.5 High -
rackRubyGems ReDoS Vulnerability in Rack::Multipart handle_mime_head 6.6 Medium -
rackRubyGems Unbounded-Parameter DoS in Rack::QueryParser 7.5 High -
rackRubyGems Rack session gets restored after deletion 4.2 Medium -
rackRubyGems Local File Inclusion in Rack::Static 7.5 High -
rackRubyGems Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection 6.9 Medium -
rackRubyGems Possible Log Injection in Rack::CommonLogger 5.7 Medium -
rackRubyGems Rack ReDoS Vulnerability in HTTP Accept Headers Parsing 6.5 Medium -
rackRubyGems Rack ReDos in content type parsing (2nd degree polynomial) 5.3 Medium -
rackRubyGems Possible DoS Vulnerability with Range Header in Rack 5.8 Medium -
rackRubyGems Possible Denial of Service Vulnerability in Rack Header Parsing 5.3 Medium -
rackRubyGems Possible Denial of Service Vulnerability in Rack's header parsing 5.3 Medium -
rackRubyGems Rack has possible DoS Vulnerability in Multipart MIME parsing 7.5 High -
rackRubyGems Denial of Service Vulnerability in Rack Content-Disposition parsing 7.5 High -
rackRubyGems Denial of service via header parsing in Rack 7.5 High -
rackRubyGems Denial of service via multipart parsing in Rack 7.5 High -
rackRubyGems Denial of Service Vulnerability in Rack Multipart Parsing 7.5 High -
rackRubyGems Possible shell escape sequence injection vulnerability in Rack 10.0 Critical -
rackRubyGems Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High -
rackRubyGems Directory traversal in Rack::Directory app bundled with Rack 8.6 High -
rackRubyGems Possible Information Leak / Session Hijack Vulnerability in Rack 6.3 Medium -
rackRubyGems Rack vulnerable to Denial of Service 7.5 High -
rackRubyGems Rack vulnerable to Cross-site Scripting 6.1 Medium -
rackRubyGems Rack vulnerable to Denial of Service via large parameter depth request 5.0 Medium -
rackRubyGems Rack vulnerable to Denial of Service 4.3 Medium -
rackRubyGems Rack rubygems receiving excessively long lines triggers out-of-memory error 5.0 Medium -
rackRubyGems Rack vulnerable to REDoS 4.3 Medium -
rackRubyGems Rack arbitrary code execution via timing attack 5.1 Medium -
rackRubyGems Rack Vulnerable to Path Traversal 4.3 Medium -
rackRubyGems Rack Gem Subject to Denial of Service via Hash Collisions 5.0 Medium