RubyGems - OSV

MAL-2026-3633

RubyGems/knot-rack-session-store

Malicious code in knot-rack-session-store (RubyGems) 13 May

No fix available

GHSA-33qg-7wpp-89cq

RubyGems/rack-session

Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization 08 Apr

Fix available
Severity - 9.1 (Critical)

GHSA-g2pf-xv49-m2h5

RubyGems/rack

Rack::Request accepts invalid Host characters, enabling host allowlist bypass 02 Apr

Fix available
Severity - 4.8 (Medium)

GHSA-q2ww-5357-x388

RubyGems/rack

Rack has Content-Length mismatch in Rack::Files error responses 02 Apr

Fix available
Severity - 4.8 (Medium)

GHSA-qv7j-4883-hwh7

RubyGems/rack

Rack::Sendfile header-based X-Accel-Mapping regex injection enables unauthorized X-Accel-Redirect 02 Apr

Fix available
Severity - 5.9 (Medium)

GHSA-8vqr-qjwx-82mw

RubyGems/rack

Rack's multipart parsing without Content-Length header allows unbounded chunked file uploads 02 Apr

Fix available
Severity - 7.5 (High)

GHSA-7mqq-6cf9-v2qp

RubyGems/rack

Rack has a root directory disclosure via unescaped regex interpolation in Rack::Directory 02 Apr

Fix available
Severity - 5.3 (Medium)

GHSA-v569-hp3g-36wr

RubyGems/rack

Rack has quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header 02 Apr

Fix available
Severity - 7.5 (High)

GHSA-qfgr-crr9-7r49

RubyGems/rack

Rack: Forwarded Header semicolon injection enables Host and Scheme spoofing 02 Apr

Fix available
Severity - 4.8 (Medium)

GHSA-rx22-g9mx-qrhv

RubyGems/rack

Rack's improper unfolding of folded multipart headers preserves CRLF in parsed parameter values 02 Apr

Fix available
Severity - 4.8 (Medium)

GHSA-vgpv-f759-9wx3

RubyGems/rack

Rack's greedy multipart boundary parsing can cause parser differentials and WAF bypass. 02 Apr

Fix available
Severity - 5.3 (Medium)

GHSA-v6x5-cg8r-vv6x

RubyGems/rack

Rack's multipart header parsing allows Denial of Service via escape-heavy quoted parameters 02 Apr

Fix available
Severity - 7.5 (High)

GHSA-x8cg-fq8g-mxfx

RubyGems/rack

Rack's multipart byte range processing allows denial of service via excessive overlapping ranges 02 Apr

Fix available
Severity - 5.3 (Medium)

GHSA-q4qf-9j86-f5mh

RubyGems/rack

Rack:: Static header_rules bypass via URL-encoded paths 02 Apr

Fix available
Severity - 5.3 (Medium)

GHSA-h2jq-g4cq-5ppq

RubyGems/rack

Rack::Static prefix matching can expose unintended files under the static root 02 Apr

Fix available
Severity - 7.5 (High)

GHSA-whrj-4476-wvmp

RubyGems/rack

Stored XSS in Rack::Directory via javascript: filenames rendered into anchor href 17 Feb

Fix available
Severity - 5.4 (Medium)

Vulnerabilities