Package · Wolfi

ruby3.2-sinatra

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 5.4

CVE-2024-21510

Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision

Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack …

logstash-8-with-output-opensearch gitlab-cng-18.2 sinatra ruby-sinatra Debian Ubuntu Wolfi RubyGems

Nov 1, 2024