Skip to content
OpenAdvisories
Unscored USN-6689-1 0 CVEs

ruby-rack vulnerabilities

Published Mar 12, 2024 · Updated Feb 4, 2026

Summary

It was discovered that Rack incorrectly parse some headers.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2023-27539, CVE-2024-26141, CVE-2024-26146)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 23.10 ruby-rack 2.2.4-3ubuntu0.1

References

  • report
    https://ubuntu.com/security/CVE-2023-27539
  • report
    https://ubuntu.com/security/CVE-2024-26141
  • report
    https://ubuntu.com/security/CVE-2024-26146