GHSA-9vc2-p34x-jhxh
Suggest an improvement- Source
- https://github.com/advisories/GHSA-9vc2-p34x-jhxh
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/09/GHSA-9vc2-p34x-jhxh/GHSA-9vc2-p34x-jhxh.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-9vc2-p34x-jhxh
- Withdrawn
- 2020-06-16T21:29:41Z
- Published
- 2018-09-17T21:56:30Z
- Modified
- 2024-12-02T05:43:51Z
- Summary
- Moderate severity vulnerability that affects rack
- Details
-
Withdrawn, accidental duplicate publish.
lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.
- Database specific
{ "cwe_ids": [], "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:29:41Z", "nvd_published_at": null, "severity": "MODERATE" }- References
Affected packages
RubyGems / rack
Package
- Name
- rack
- Purl
- pkg:gem/rack
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.4.6
Affected versions
0.*
0.1.0
0.2.0
0.3.0
0.4.0
0.9.0
0.9.1
1.*
1.0.0
1.0.1
1.1.0
1.1.1.pre
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.2.0
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.3.0.beta
1.3.0.beta2
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.3.10
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
RubyGems / rack
Package
- Name
- rack
- Purl
- pkg:gem/rack
RubyGems / rack
Package
- Name
- rack
- Purl
- pkg:gem/rack