Skip to content
OpenAdvisories
High DLA-2216-1 1 CVE

ruby-rack - security update

Published May 22, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 ruby-rack 1.5.2-3+deb8u3

Vulnerabilities 1

  • High 8.6
    CVE-2020-8161

    Directory traversal in Rack::Directory app bundled with Rack

    A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.

    rack ruby-rack ruby-rack Debian Ubuntu RubyGems