Product by Ubuntu
Ruby-rack
13 known vulnerabilities in Ruby-rack (Ubuntu), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-34827 | Rack: Algorithmic-Complexity DoS in Rack::Multipart::Parser | 7.5 | |
| High | CVE-2026-34785 | Rack: Local file inclusion in `Rack::Static` via URL Prefix Matching | 7.5 | |
| High | CVE-2026-34829 | Rack: Denial of Service via Unbounded Multipart File Upload Without Content-Length | 7.5 | |
| High | CVE-2026-34230 | Rack: Quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header | 5.3 | |
| High | CVE-2026-34826 | Rack: Unbounded Range Count in get_byte_ranges Enables DoS | 5.3 | |
| High | CVE-2026-34830 | Rack: Permissive Regular Expression | 5.9 | |
| Medium | CVE-2026-34763 | Rack: Rack::Directory info disclosure and DoS via unescaped regex interpolation | 5.3 | |
| Medium | CVE-2026-34786 | Rack: Rack::Static header_rules bypass via URL-encoded paths | 5.3 | |
| Medium | CVE-2026-26962 | Rack: Header injection in multipart requests | 4.8 | |
| Medium | CVE-2026-34835 | Rack: Improper Validation of Syntactic Correctness of Input | 4.8 | |
| Medium | CVE-2026-32762 | Rack: Forwarded Header semicolon injection enables Host and Scheme spoofing | 4.8 | |
| Medium | CVE-2026-34831 | Rack: Content-Length mismatch in Rack::Files error responses | 4.8 | |
| Medium | CVE-2026-26961 | Rack: Multipart Boundary Parsing Ambiguity allowing WAF Bypass | 3.7 |