rubygem-rack vulnerabilities (openSUSE)
25 vulnerabilities.
-
rubygem-rackopenSUSE Rack: Multipart Boundary Parsing Ambiguity allowing WAF Bypass 3.7 Low -
rubygem-rackopenSUSE Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing 7.5 High -
rubygem-rackopenSUSE Rack has Possible Information Disclosure Vulnerability 5.8 Medium -
rubygem-rackopenSUSE Unbounded-Parameter DoS in Rack::QueryParser 7.5 High -
rubygem-rackopenSUSE Rack session gets restored after deletion 4.2 Medium -
rubygem-rackopenSUSE Local File Inclusion in Rack::Static 7.5 High -
rubygem-rackopenSUSE Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection 6.9 Medium -
rubygem-rackopenSUSE Possible Log Injection in Rack::CommonLogger 5.7 Medium -
rubygem-rackopenSUSE Rack ReDos in content type parsing (2nd degree polynomial) 5.3 Medium -
rubygem-rackopenSUSE Possible DoS Vulnerability with Range Header in Rack 5.8 Medium -
rubygem-rackopenSUSE Possible Denial of Service Vulnerability in Rack Header Parsing 5.3 Medium -
rubygem-rackopenSUSE Possible Denial of Service Vulnerability in Rack's header parsing 5.3 Medium -
rubygem-rackopenSUSE Rack has possible DoS Vulnerability in Multipart MIME parsing 7.5 High -
rubygem-rackopenSUSE Denial of Service Vulnerability in Rack Content-Disposition parsing 7.5 High -
rubygem-rackopenSUSE Denial of service via header parsing in Rack 7.5 High -
rubygem-rackopenSUSE Denial of service via multipart parsing in Rack 7.5 High -
rubygem-rackopenSUSE Denial of Service Vulnerability in Rack Multipart Parsing 7.5 High -
rubygem-rackopenSUSE Possible shell escape sequence injection vulnerability in Rack 10.0 Critical -
rubygem-rackopenSUSE Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names 7.5 High -
rubygem-rackopenSUSE Directory traversal in Rack::Directory app bundled with Rack 8.6 High -
rubygem-rackopenSUSE Possible Information Leak / Session Hijack Vulnerability in Rack 6.3 Medium -
rubygem-rackopenSUSE Rack vulnerable to Cross-site Scripting 6.1 Medium -
rubygem-rackopenSUSE Rack vulnerable to Denial of Service via large parameter depth request 5.0 Medium -
rubygem-rackopenSUSE Rack arbitrary code execution via timing attack 5.1 Medium -
rubygem-rackopenSUSE Rack Vulnerable to Path Traversal 4.3 Medium