Skip to content
OpenAdvisories
Critical DLA-3095-1 2 CVEs

ruby-rack - security update

Published Sep 4, 2022 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 ruby-rack 2.0.6-3+deb10u1

Vulnerabilities 2

  • Critical 10.0

    Possible shell escape sequence injection vulnerability in Rack

    A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.

  • High 7.5

    Denial of Service Vulnerability in Rack Multipart Parsing

    A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.