Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | ruby-rack-cors | 1.0.2-1+deb10u1 |
Vulnerabilities 1
-
Medium 5.3
The rack-cors rubygem may allow directory traveral
An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.