Rack Project Rack vulnerabilities

• rack, debian linux +1 more Rack ReDos in content type parsing (2nd degree polynomial) CVE-2024-25126 Fix available EPSS 35.4% 5.3 MediumFebruary 28, 2024
• rack, debian linux +1 more Possible DoS Vulnerability with Range Header in Rack CVE-2024-26141 Fix available 5.8 MediumFebruary 28, 2024
• rack, debian linux +1 more Possible Denial of Service Vulnerability in Rack Header Parsing CVE-2024-26146 Fix available 5.3 MediumFebruary 28, 2024
• rack project rack, debian linux +1 more Denial of Service Vulnerability in Rack Multipart Parsing CVE-2022-30122 Fix available 7.5 HighMay 27, 2022
• rack project rack, debian linux +1 more Possible shell escape sequence injection vulnerability in Rack CVE-2022-30123 Fix available 10.0 CriticalMay 27, 2022
• rack project rack, canonical ubuntu linux, debian linux +2 more Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names CVE-2020-8184 Fix available 7.5 HighJune 19, 2020
• rack project rack, canonical ubuntu linux, debian linux +2 more Directory traversal in Rack::Directory app bundled with Rack CVE-2020-8161 Fix available 8.6 HighMay 22, 2020
• rack Rack vulnerable to Denial of Service CVE-2018-16470 Fix available 7.5 HighNovember 13, 2018
• rack, debian linux +1 more Rack vulnerable to Cross-site Scripting CVE-2018-16471 Fix available 6.1 MediumNovember 13, 2018
• rack project rack, debian linux, opensuse +2 more Rack vulnerable to Denial of Service via large parameter depth request CVE-2015-3225 Fix available 5.0 MediumJune 26, 2015
• rack project rack Rack vulnerable to Denial of Service CVE-2013-0184 Fix available 4.3 MediumMarch 1, 2013
• rack project rack Rack rubygems receiving excessively long lines triggers out-of-memory error CVE-2013-0183 Fix available 5.0 MediumMarch 1, 2013
• rack project rack Rack vulnerable to REDoS CVE-2012-6109 Fix available 4.3 MediumMarch 1, 2013
• rack project rack Rack arbitrary code execution via timing attack CVE-2013-0263 Fix available 5.1 MediumFebruary 8, 2013
• rack project rack Rack Vulnerable to Path Traversal CVE-2013-0262 Fix available 4.3 MediumFebruary 8, 2013
• rack project rack Rack Gem Subject to Denial of Service via Hash Collisions CVE-2011-5036 Fix available 5.0 MediumDecember 30, 2011