Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | ruby-rack-cors | 0.4.0-1+deb9u2 |
Vulnerabilities 1
-
Medium 5.3
The rack-cors rubygem may allow directory traveral
An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.