Red Hat Enterprise Linux 9/rhel9/ruby-31
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion) | Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundleLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator | Red HatRubyGems | High | Fix reported | |
| Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection | Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel9 | Red HatRubyGems | Medium | Fix reported | |
| Possible Log Injection in Rack::CommonLogger | Logging Subsystem for Red Hat OpenShift/fluentd-rhel9Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 | Red HatRubyGems | Medium | Fix reported |