rubygem-rack-session vulnerabilities (openSUSE)

2 vulnerabilities.

• rubygem-rack-session openSUSE Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization CVE-2026-39324 Public exploitFix available 9.3 CriticalApril 7, 2026
• rubygem-rack-session openSUSE Rack session gets restored after deletion CVE-2025-46336 Fix available 4.2 MediumMay 8, 2025