Approved changes feed: RSS · Atom
cpe:2.3:a:rack_project:rack:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Rack Project (769ee8c2-0eb9-5278-96b8-ddd991e4993c) |
|---|---|
| Product | Rack (24003e51-ac5c-53cf-baa4-c1777fb8ccb5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/ruby-rack |
purl2cpe | 2026-06-01 10:13:32.557131 |
pkg:deb/ubuntu/ruby-rack |
purl2cpe | 2026-06-01 10:13:32.557134 |
pkg:gem/rack |
purl2cpe | 2026-06-01 10:13:32.557137 |
pkg:github/rack/rack |
purl2cpe | 2026-06-01 10:13:32.557140 |
pkg:rpm/fedora/rubygem-rack |
purl2cpe | 2026-06-01 10:13:32.557143 |
pkg:rpm/opensuse/rubygem-rack |
purl2cpe | 2026-06-01 10:13:32.557146 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-30123 |
vulnerable | 2026-06-08 05:43:36.994394 |
Details available
A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.
Published: 2022-12-05T00:00:00.000Z
Updated: 2024-08-03T06:40:47.582Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30122 |
vulnerable | 2026-06-08 05:43:36.993946 |
Details available
A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.
Published: 2022-12-05T00:00:00.000Z
Updated: 2024-11-19T20:16:22.716Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8184 |
vulnerable | 2026-06-08 05:27:15.114833 |
Details available
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.
Published: 2020-06-19T00:00:00.000Z
Updated: 2024-08-04T09:56:26.918Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8161 |
vulnerable | 2026-06-08 05:27:14.989547 |
Details available
A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.
Published: 2020-07-02T00:00:00.000Z
Updated: 2024-08-04T09:48:25.656Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16471 |
vulnerable | 2026-06-08 05:11:04.903822 |
Details available
There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the scheme to be limited to 'http' or 'https' and do not escape the return value could be vulnerable to an XSS attack. Note that applications using the normal escaping mechanisms provided by Rails may not impacted, but applications that bypass the escaping mechanisms, or do not use them may be vulnerable.
Published: 2018-11-13T23:00:00.000Z
Updated: 2024-08-05T10:24:32.587Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3225 |
vulnerable | 2026-06-08 05:06:37.658763 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6109 |
vulnerable | 2026-06-08 05:02:59.509670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5036 |
vulnerable | 2026-06-08 04:59:34.267776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.