Product by Debian
Ruby-rack
36 known vulnerabilities in Ruby-rack (Debian), 0 of them actively exploited (CISA KEV).
Key figures
36
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-25126 | Rack ReDos in content type parsing (2nd degree polynomial) | 5.3 | |
| Critical | CVE-2022-30123 | Https://github.com/rack/rack: Improper Neutralization of Escape, Meta, or Control Sequences | 10.0 | |
| High | CVE-2022-30122 | Https://github.com/rack/rack: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2023-27530 | Https://github.com/rack/rack: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2022-44570 | Https://github.com/rack/rack: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2022-44572 | Https://github.com/rack/rack: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2022-44571 | Https://github.com/rack/rack: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2025-46727 | Unbounded-Parameter DoS in Rack::QueryParser | 7.5 | |
| High | CVE-2024-26146 | Possible Denial of Service Vulnerability in Rack Header Parsing | 5.3 | |
| High | CVE-2025-27610 | Local File Inclusion in Rack::Static | 7.5 | |
| High | CVE-2024-26141 | Possible DoS Vulnerability with Range Header in Rack | 5.8 | |
| High | CVE-2025-61772 | Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion) | 7.5 | |
| High | CVE-2025-61770 | Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) | 7.5 | |
| Medium | CVE-2025-25184 | Possible Log Injection in Rack::CommonLogger | 6.5 | |
| High | CVE-2026-22860 | Rack has a Directory Traversal via Rack:Directory | 7.5 | |
| High | CVE-2025-27111 | Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection | 7.5 | |
| High | CVE-2025-61919 | Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing | 7.5 | |
| High | CVE-2026-34827 | Rack: Algorithmic-Complexity DoS in Rack::Multipart::Parser | 7.5 | |
| Medium | CVE-2023-27539 | Rails Rack: Denial of Service | 5.3 | |
| High | CVE-2025-59830 | Rack: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2025-61771 | Rack: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2026-34785 | Rack: Local file inclusion in `Rack::Static` via URL Prefix Matching | 7.5 | |
| High | CVE-2026-34829 | Rack: Denial of Service via Unbounded Multipart File Upload Without Content-Length | 7.5 | |
| Medium | CVE-2025-61780 | Rack has Possible Information Disclosure Vulnerability | 5.8 | |
| High | CVE-2026-34230 | Rack: Quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header | 5.3 |