High DLA-3166-1 1 CVE

ruby-sinatra - security update

Published Oct 28, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	ruby-sinatra	2.0.5-4+deb10u1

Vulnerabilities 1

High 7.5

CVE-2022-29970

sinatra does not validate expanded path matches

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

sinatra ruby-sinatra ruby-sinatra Debian Ubuntu RubyGems

May 2, 2022