Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-mr3q-g2mv-mr4q
  • RubyGems/sinatra
 Sinatra is vulnerable to ReDoS through ETag header value generation 10 Oct 2025
  • Fix available
  • Severity - 2.7 (Low)
GHSA-hxx2-7vcw-mqr3
  • RubyGems/sinatra
 Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision 01 Nov 2024
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-2x8x-jmrp-phxw
  • RubyGems/sinatra
 Sinatra vulnerable to Reflected File Download attack 30 Nov 2022
  • Fix available
  • Severity - 8.8 (High)
GHSA-qp49-3pvw-x4m5
  • RubyGems/sinatra
 sinatra does not validate expanded path matches 03 May 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-mq35-wqvf-r23c
  • RubyGems/sinatra
 Sinatra Cross-site Scripting vulnerability 05 Jun 2018
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-h29f-7f56-j8wh
  • RubyGems/sinatra
 Sinatra Path Traversal vulnerability 20 Feb 2018
  • Fix available
  • Severity - 5.3 (Medium)