All products

Red Hat Satellite 6/satellite:el8/rubygem-rack

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Rack has a Possible Information Disclosure VulnerabilityCVE-2025-61780 · GHSA-R657-RXJC-J557 OpenShift Service Mesh 2/openshift-service-mesh/grafana-rhel8OpenShift Service Mesh 2/openshift-service-mesh/istio-cni-rhel8 Red HatRubyGems Medium Fix reported
Rack has an Unbounded-Parameter DoS in Rack::QueryParserCVE-2025-46727 · GHSA-GJH7-P2FX-99VX Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems High Fix reported
Rack session gets restored after deletionCVE-2025-46336 · GHSA-9J94-67JR-4CQJ Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems Medium Fix reported
Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsingCVE-2025-61919 · GHSA-6XW4-3V39-52MM Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel7Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8 Red HatRubyGems High Fix reported
Rack session gets restored after deletionCVE-2025-32441 · GHSA-VPFW-47H7-XJ4G Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems Medium Fix reported
Escape Sequence Injection vulnerability in Rack lead to Possible Log InjectionCVE-2025-27111 · GHSA-8CGQ-6MH2-7J6V Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel9 Red HatRubyGems Medium Fix reported
Local File Inclusion in Rack::StaticCVE-2025-27610 · GHSA-7WQH-767X-R66V Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel9Red Hat Satellite 6/satellite:el8/rubygem-rack Red HatRubyGems High Fix reported