Skip to content
OpenAdvisories
Medium DLA-1585-1 1 CVE

ruby-rack - security update

Published Nov 21, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 ruby-rack 1.5.2-3+deb8u2

Vulnerabilities 1

  • Medium 6.1
    CVE-2018-16471

    Rack vulnerable to Cross-site Scripting

    There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the scheme to be limited to 'http' or 'https' and do not escape …

    rack rack rack ruby-rack Debian Ubuntu RubyGems