Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-27530
7.5
HIGHCVSS v3
Severity scale
010
Description
A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.
rack
RubyGemsRack provides a minimal, modular and adaptable interface for developing
web applications in Ruby. By wrapping HTTP requests and responses in
the simplest way possible, it unifies and distills the API for web
servers, web frameworks, and software in between (the so-called
middleware) into a single method call.
RubyGemsRack provides a minimal, modular and adaptable interface for developing
web applications in Ruby. By wrapping HTTP requests and responses in
the simplest way possible, it unifies and distills the API for web
servers, web frameworks, and software in between (the so-called
middleware) into a single method call.
= *, >= 3.0.0, < 3.0.4.2, >= 2.2.0, < 2.2.6.3, < 2.0.9.3, >= 2.1.0, < 2.1.4.3NVD
rack/rack
GitHubA modular Ruby web server interface.
GitHubA modular Ruby web server interface.= *, >= 3.0.0, < 3.0.4.2, >= 2.2.0, < 2.2.6.3, < 2.0.9.3, >= 2.1.0, < 2.1.4.3NVD