Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
ruby-rack-session
ruby-rack-session vulnerabilities (Ubuntu)
1 vulnerability.
ruby-rack-session
Ubuntu
Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization
CVE-2026-39324
Public exploit
Fix available
9.3
Critical
April 7, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open