rack
RubyGems54 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting rackpage 2 of 2
- CVE-2026-34829HIGHCVSS 7.5EG 7.5fixed in 2.2.23, 3.1.21 or 3.2.6, by version range2026-04-02
vulnerable: 3.2.0 ... 3.2.5 (6 versions)
Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser only wraps the request body in a BoundedIO when CONTENT_LENGTH is present. When a multipart/form-data request is sent without…
- CVE-2026-34830HIGHCVSS 7.5EG 7.5fixed in 2.2.23, 3.1.21 or 3.2.6, by version range2026-04-02
vulnerable: 3.2.0 ... 3.2.5 (6 versions)
Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Sendfile#map_accel_path interpolates the value of the X-Accel-Mapping request header directly into a regular expression when rewriting file pat…
- CVE-2026-34831MEDIUMCVSS 6.5EG 6.5fixed in 2.2.23, 3.1.21 or 3.2.6, by version range2026-04-02
vulnerable: 3.2.0 ... 3.2.5 (6 versions)
Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Files#fail sets the Content-Length response header using String#size instead of String#bytesize. When the response body contains multibyte UTF-…
- CVE-2026-34835MEDIUMCVSS 6.5EG 6.5fixed in 3.1.21 or 3.2.6, by version range2026-04-02
vulnerable: 3.2.0 ... 3.2.5 (6 versions)
Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Request parses the Host header using an AUTHORITY regular expression that accepts characters not permitted in RFC-com…
Check whether rack is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for rack CVEs against the assets you own.
Book a Demo →