Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-30123
10
CRITICALCVSS v3
Severity scale
010
Description
A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.
rack
RubyGemsRack provides a minimal, modular and adaptable interface for developing
web applications in Ruby. By wrapping HTTP requests and responses in
the simplest way possible, it unifies and distills the API for web
servers, web frameworks, and software in between (the so-called
middleware) into a single method call.
RubyGemsRack provides a minimal, modular and adaptable interface for developing
web applications in Ruby. By wrapping HTTP requests and responses in
the simplest way possible, it unifies and distills the API for web
servers, web frameworks, and software in between (the so-called
middleware) into a single method call.
>= 2.2.0, < 2.2.3.1, >= 2.1.0, < 2.1.4.1, < 2.0.9.1NVD
rack/rack
GitHubA modular Ruby web server interface.
GitHubA modular Ruby web server interface.>= 2.2.0, < 2.2.3.1, >= 2.1.0, < 2.1.4.1, < 2.0.9.1NVD