Vulnerability Database

MGASA-2026-0226

Mageia:9/ruby-rack

Updated ruby-rack packages fix security vulnerabilities 18 Jun

Fix available

MAL-2026-3633

RubyGems/knot-rack-session-store

Malicious code in knot-rack-session-store (RubyGems) 13 May

No fix available

USN-8190-2

Ubuntu:26.04:LTS/ruby-rack-session

ruby-rack-session vulnerability 28 Apr

Fix available

openSUSE-SU-2026:10604-1

openSUSE:Tumbleweed/rubygem-rack-session

ruby4.0-rubygem-rack-session-2.1.2-1.1 on GA media 22 Apr

Fix available

USN-8190-1

Ubuntu:25.10/ruby-rack-session

ruby-rack-session vulnerability 20 Apr

Fix available

USN-8182-1

Ubuntu:24.04:LTS/ruby-rack
Ubuntu:25.10/ruby-rack
Ubuntu:Pro:14.04:LTS/ruby-rack
Ubuntu:Pro:16.04:LTS/ruby-rack
Ubuntu:Pro:18.04:LTS/ruby-rack
... 2 more

ruby-rack vulnerabilities 17 Apr

Fix available

MINI-hxrg-p97j-fmq6

MinimOS/ruby3.4-rack-session

See record for full details 08 Apr

Fix available

MINI-g97c-c5pf-6rx4

MinimOS/ruby4.0-rack-session

See record for full details 08 Apr

Fix available

GHSA-33qg-7wpp-89cq

RubyGems/rack-session

Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization 08 Apr

Fix available
Severity - 9.1 (Critical)

openSUSE-SU-2026:10508-1

openSUSE:Tumbleweed/rubygem-rack-2.2

ruby4.0-rubygem-rack-2.2-2.2.23-1.1 on GA media 08 Apr

Fix available

DEBIAN-CVE-2026-39324

Debian:13/ruby-rack-session
Debian:14/ruby-rack-session

See record for full details 07 Apr

Fix available
Severity - 9.8 (Critical)

UBUNTU-CVE-2026-39324

Ubuntu:25.10/ruby-rack-session
Ubuntu:26.04:LTS/ruby-rack-session

See record for full details 07 Apr

Fix available
Severity - 9.3 (Critical)

CVE-2026-39324

github.com/rack/rack-session

Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization 07 Apr

Fix available
Severity - 9.3 (Critical)

CGA-7426-whp5-96mq

Chainguard/ruby3.3-rack-2.2
Wolfi/ruby3.3-rack-2.2

See record for full details 04 Apr

Fix available
Severity - 5.3 (Medium)

CGA-67cc-fg9q-3cf2

Chainguard/ruby3.3-rack-2.2
Wolfi/ruby3.3-rack-2.2

See record for full details 04 Apr

Fix available
Severity - 5.3 (Medium)

CGA-f6cv-6p98-mf2v

Chainguard/ruby3.3-rack-2.2
Wolfi/ruby3.3-rack-2.2

See record for full details 04 Apr

Fix available
Severity - 3.7 (Low)

Vulnerabilities