Skip to content
OpenAdvisories

Package · RubyGems

sinatra

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-21510

    Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision

    Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack …

    logstash-8-with-output-opensearch gitlab-cng-18.2 sinatra ruby-sinatra Debian Ubuntu Wolfi RubyGems
  • Medium 6.1
    CVE-2018-11627

    Sinatra Cross-site Scripting vulnerability

    Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.

    sinatra ruby-sinatra Ubuntu RubyGems
  • Medium 5.3
    CVE-2018-7212

    Sinatra Path Traversal vulnerability

    An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows. Path traversal is possible via backslash characters.

    sinatra RubyGems