Skip to content
OpenAdvisories

Package · Debian

ruby-sinatra

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2025-61921

    Sinatra has ReDoS vulnerability in ETag header value generation

    Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there is a denial of service vulnerability in the `If-Match` and `If-None-Match` header parsing component of Sinatra, if the `etag` method is used when co…

    sinatra sinatra sinatra ruby-sinatra Debian Ubuntu RubyGems