rubygems
Security Advisories for https://github.com/rack/rack in rubygems Clear Filters
High
10 months ago
Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing
rubygems
rack
High
10 months ago
Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
rubygems
rack
High
10 months ago
Rack: Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
rubygems
rack
High
10 months ago
Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)
rubygems
rack
High
11 months ago
Rack has an unsafe default in Rack::QueryParser allows params_limit bypass via semicolon-separated parameters
rubygems
rack
Moderate
over 1 year ago
Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection
rubygems
rack
Moderate
over 2 years ago
Rack vulnerable to ReDoS in content type parsing (2nd degree polynomial)
rubygems
rack
Low
over 2 years ago
Rack Header Parsing leads to Possible Denial of Service Vulnerability
rubygems
rack
Low
over 3 years ago
Possible Denial of Service Vulnerability in Rack's header parsing
rubygems
rack
Low
over 3 years ago
Denial of Service Vulnerability in Rack Content-Disposition parsing
rubygems
rack
Critical
about 4 years ago
Possible shell escape sequence injection vulnerability in Rack
rubygems
rack
High
about 6 years ago
Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names
rubygems
rack
Moderate
over 6 years ago
Possible Information Leak / Session Hijack Vulnerability in Rack
rubygems
rack
Moderate
almost 9 years ago
Rack rubygems receiving excessively long lines triggers out-of-memory error
rubygems
rack
Moderate
almost 9 years ago
Rack vulnerable to Denial of Service via large parameter depth request
rubygems
rack
Filter by Severity
Filter by Package
actionpack
59
nokogiri
56
rack
50
rubygems-update
25
puppet
23
activerecord
23
activesupport
17
publify_core
15
rails-html-sanitizer
15
camaleon_cms
15
puma
14
passenger
14
decidim
13
actionview
12
activestorage
11
oj
11
loofah
11
fat_free_crm
11
rails
10
net-imap
10
ruby-saml
10
decidim-core
9
openc3
9
avo
8
spree
8
rexml
8
katello
8
fluentd
7
org.jruby:jruby-stdlib
7
sinatra
6
view_component
6
devise
6
mcp
6
json
6
webrick
6
doorkeeper
6
ember-source
6
grpcio
5
grpc
5
commonmarker
5
cgi
5
jquery-rails
5
yard
5
bundler
5
carrierwave
5
sidekiq
5
dragonfly
4
bootstrap
4
decidim-admin
4
trix
4
action_text-trix
4
rails_admin
4
sanitize
4
websocket-driver
4
mail
4
uri
4
phlex
4
bootstrap
4
faraday
3
jquery-ui
3
jQuery
3
git
3
rack-cors
3
org.webjars.npm:jquery-ui
3
omniauth-saml
3
sqlite3
3
openssl
3
decidim-verifications
3
bootstrap-sass
3
resque
3
json-jwt
3
activeadmin
3
httparty
3
rubyzip
3
gollum
3
sqlite3-ruby
3
omniauth
3
jQuery.UI.Combined
3
concurrent-ruby
3
private_address_check
3
secure_headers
3
chartkick
3
rest-client
3
geminabox
3
spree_api
3
jquery-ui-rails
3
rdoc
3
io.grpc:grpc-protobuf
3
spina
3
devise-two-factor
3
jquery
2
bsv-sdk
2
pghero
2
cocoapods-downloader
2
kramdown
2
sprockets
2
org.webjars.npm:jquery
2
lodash
2
oauth
2
openc3-cosmos-tool-iframe
2
VladTheEnterprising
2
oxidized-web
2
radiant
2
faye
2
pdfkit
2
pay
2
jruby-openssl
2
omniauth-facebook
2
facter
2
alchemy_cms
2
solidus_core
2
yajl-ruby
2
logstash-core
2
redcarpet
2
css_parser
2
google_sign_in
2
bootstrap-sass
2
twbs/bootstrap
2
actiontext
2
sidekiq-unique-jobs
2
pageflow
2
doorkeeper-openid_connect
2
activejob
2
administrate
2
paperclip
2
graphql
2
addressable
2
ox
2
iodine
2
bson
2
echor
2
excon
2
lodash-es
2
rack-session
2
org.webjars:bootstrap
2
lodash-rails
2
mini_magick
2
sup
2
safemode
2
bootstrap
2
twitter-bootstrap-rails
2
red-arrow
2
solidus_frontend
2
pwpush
2
decidim-templates
2
ruby-openid
2
com.google.protobuf:protobuf-kotlin
2
git-fastclone
2
spree_auth_devise
2
kaminari
2
field_test
2
qiita-markdown
2
com.google.protobuf:protobuf-java
2
mechanize
2
google-protobuf
2
decidim-meetings
2
actionmailer
2
i18n
2
net-ldap
2
@openc3/tool-common
2
minitar
1
net.sf.mpxj-for-csharp
1
kelredd-pruview
1
gemirro
1
pgsync
1
authlogic
1
sequenceserver
1
github.com/pubnub/go/v7
1
awesome-bot
1
msgpack
1
pagy
1
clearance
1
web-console
1
rbovirt
1
vagrant
1
faye-websocket
1
better_errors
1
solidus_backend
1
open-uri-cached
1
github.com/Shopify/ejson2env/v2
1
curl
1
karteek-docsplit
1
openshift-origin-controller
1
geokit-rails
1
com.pubnub:pubnub
1
gibbon
1
mixlib-archive
1
datagrid
1
Pubnub
1
thumbshooter
1
sigstore
1
spree_storefront
1
pubnub
1
thin
1
smalruby
1
logstash
1
Autolab
1
exiftool_vendored
1
sha3
1
resolv
1
Filter by Repository
https://github.com/rails/rails
70
https://github.com/sparklemotion/nokogiri
35
https://github.com/rack/rack
29
https://github.com/rubygems/rubygems
18
https://github.com/decidim/decidim
15
https://github.com/puppetlabs/puppet
15
https://github.com/rails/rails-html-sanitizer
14
https://github.com/publify/publify
14
https://github.com/puma/puma
12
https://github.com/owen2345/camaleon-cms
11
https://github.com/phusion/passenger
11
https://github.com/fatfreecrm/fat_free_crm
9
https://github.com/ruby/rexml
8
https://github.com/SAML-Toolkits/ruby-saml
7
https://github.com/doorkeeper-gem/doorkeeper
6
https://github.com/flavorjones/loofah
6
https://github.com/sinatra/sinatra
6
https://github.com/twbs/bootstrap
5
https://github.com/OpenC3/cosmos
5
https://github.com/jquery/jquery
5
https://github.com/solidusio/solidus
5
https://github.com/grpc/grpc
4
https://github.com/ruby/openssl
4
https://github.com/markevans/dragonfly
4
https://github.com/mikel/mail
4
https://github.com/rgrove/sanitize
4
https://github.com/ruby/webrick
4
https://github.com/avo-hq/avo
4
https://github.com/Katello/katello
4
https://github.com/carrierwaveuploader/carrierwave
4
https://github.com/phlex-ruby/phlex
3
https://github.com/jtdowney/private_address_check
3
https://github.com/rest-client/rest-client
3
https://github.com/gjtorikian/commonmarker
3
https://github.com/rubygems/rubygems.org
3
https://github.com/ruby/cgi
3
https://github.com/rubyzip/rubyzip
3
https://github.com/sidekiq/sidekiq
3
https://github.com/ruby-git/ruby-git
3
https://github.com/ruby/uri
3
https://github.com/spree/spree
3
https://github.com/geminabox/geminabox
3
https://github.com/activeadmin/activeadmin
3
https://github.com/fluent/fluentd
3
https://github.com/resque/resque
3
https://github.com/gollum/gollum
3
https://github.com/lsegal/yard
3
https://github.com/cyu/rack-cors
3
https://github.com/twitter/secure_headers
2
https://github.com/CocoaPods/cocoapods-downloader
2
https://github.com/ankane/pghero
2
https://github.com/nov/json-jwt
2
https://github.com/gettalong/kramdown
2
https://github.com/solidusio/solidus_auth_devise
2
https://github.com/ankane/field_test
2
https://github.com/github/cmark-gfm
2
https://github.com/lodash/lodash
2
https://github.com/ruby-ldap/ruby-net-ldap
2
https://github.com/ruby/net-imap
2
https://github.com/vmg/redcarpet
2
https://github.com/protocolbuffers/protobuf
2
https://github.com/jquery/jquery-ui
2
https://github.com/rack/rack-session
2
https://github.com/brianmario/yajl-ruby
2
https://github.com/square/git-fastclone
2
https://github.com/ohler55/ox
2
https://github.com/kaminari/kaminari
2
https://gitlab.com/gitlab-org/cves
2
https://github.com/mhenrixon/sidekiq-unique-jobs
2
https://github.com/plataformatec/devise
2
https://github.com/sup-heliotrope/sup
2
https://github.com/ytti/oxidized-web
2
https://github.com/thoughtbot/paperclip
2
https://github.com/railsadminteam/rails_admin
2
https://github.com/ankane/chartkick
2
https://github.com/omniauth/omniauth
2
https://github.com/ruby/rdoc
2
https://github.com/basecamp/google_sign_in
2
https://github.com/faye/faye
2
https://github.com/mongodb/bson-ruby
2
https://github.com/svenfuchs/safemode
2
https://github.com/svenfuchs/i18n
2
https://github.com/sparklemotion/mechanize
2
https://github.com/jnunemaker/httparty
2
https://github.com/openid/ruby-openid
2
https://github.com/pglombardo/PasswordPusher
2
https://github.com/codevise/pageflow
2
https://github.com/increments/qiita-markdown
2
https://github.com/emberjs/ember.js
2
https://github.com/mperham/sidekiq
2
https://github.com/tinfoil/devise-two-factor
2
https://github.com/github/view_component
1
https://github.com/ruby/ruby
1
https://github.com/TrestleAdmin/trestle-auth
1
https://github.com/jruby/jruby-openssl
1
https://github.com/jekyll/jekyll
1
https://github.com/dejan/espeak-ruby
1
https://github.com/ankane/chartkick.js
1
https://github.com/ViewComponent/view_component
1
https://github.com/VulnSphere/LLMVulnSphere
1
https://github.com/wurmlab/sequenceserver
1
https://github.com/whiteleaf7/narou
1
https://github.com/rtomayko/rack-cache
1
https://github.com/theforeman/smart_proxy_dynflow
1
https://github.com/rswag/rswag
1
https://github.com/Sorcery/sorcery
1
https://github.com/recurly/recurly-client-ruby
1
https://github.com/paragbagul111/CVE-2023-30145
1
https://github.com/floraison/fugit
1
https://github.com/imsebao/404team
1
https://github.com/plataformatec/simple_form
1
https://github.com/XKCP/XKCP
1
https://github.com/oivoodoo/devise_masquerade
1
https://github.com/petergoldstein/dalli
1
https://github.com/paragbagul111/CVE-2024-48652
1
https://github.com/sparklemotion/nekohtml
1
https://github.com/ffi/ffi
1
https://github.com/schneems/wicked
1
https://github.com/rails/activerecord-session_store
1
https://github.com/thoughtbot/administrate
1
https://github.com/P3ngu1nW/CVE_Request
1
https://github.com/ruby/time
1
https://github.com/ankane/pgsync
1
https://github.com/camilova/activerecord-update-by-case
1
https://github.com/cgriego/active_attr
1
https://github.com/affix/CVE-2022-36231
1
https://github.com/shardlab/discordrb
1
https://github.com/fluent/fluentd-ui
1
https://github.com/rmosolgo/graphql-ruby
1
https://github.com/synth/omniauth-microsoft_graph
1
https://github.com/spejman/festivaltts4r
1
https://github.com/ahorner/text-helpers
1
https://github.com/tigris/open-uri-cached
1
https://github.com/ruby-grape/grape
1
https://github.com/thoughtbot/clearance
1
https://github.com/rubygems/bundler
1
https://github.com/sisimai/rb-sisimai
1
https://github.com/flori/json
1
https://github.com/unpoly/unpoly-rails
1
https://github.com/stimulusreflex/stimulus_reflex
1
https://github.com/octokit/octopoller.rb
1
https://github.com/twbs/bootstrap-sass
1
https://github.com/rails/web-console
1
https://github.com/bbatsov/rubocop
1
https://github.com/beenhero/omniauth-weibo-oauth2
1
https://github.com/alphagov/tech-docs-gem
1
https://gitlab.com/2013/11
1
https://github.com/josh/rack-ssl
1
https://github.com/octokit/octokit.rb
1
https://github.com/Snorby/snorby
1
https://github.com/macournoyer/thin
1
https://github.com/seattlerb/ruby_parser
1
https://github.com/webbynode/webbynode
1
https://github.com/theforeman/ldap_fluff
1
https://github.com/decidim-ice/decidim-module-decidim_awesome
1
https://github.com/quadule/colorscore
1
https://github.com/GNOME/libxml2
1
https://github.com/ConradIrwin/em-imap
1
https://github.com/doorkeeper-gem/doorkeeper-openid_connect
1
https://github.com/rails/jquery-rails
1
https://github.com/exiftool-rb/exiftool_vendored.rb
1
https://github.com/PierreRambaud/gemirro
1
https://github.com/jgarber/redcloth
1
https://github.com/evan/ccsv
1
https://github.com/binarylogic/authlogic
1
https://github.com/BetterErrors/better_errors
1
https://github.com/collectiveidea/audited
1
https://github.com/dmendel/bindata
1
https://github.com/igrigorik/em-http-request
1
https://github.com/autolab/Autolab
1
https://github.com/makandra/consul
1
https://github.com/dspinhirne/netaddr-rb
1
https://github.com/excon/excon
1
https://github.com/spinacms/spina
1
https://github.com/rails/globalid
1
https://github.com/rsantamaria/papercrop
1
https://github.com/zvory/csv-safe
1
https://github.com/zenspider/ruby_parser-legacy
1
https://github.com/alexreisner/geocoder
1
https://github.com/wconrad/ftpd
1
https://github.com/presidentbeef/rails-security-history
1
https://github.com/samg/diffy
1
https://github.com/ankane/blazer
1
https://github.com/jirutka/asciidoctor-include-ext
1
https://github.com/Shopify/omniauth-shopify-oauth2
1
https://github.com/rf-/keynote
1
https://github.com/jamesmartin/inline_svg
1
https://github.com/Smashing/smashing
1
https://github.com/discourse/rails_multisite
1
https://github.com/rapid7/metasploit-framework
1
https://github.com/shrinerb/shrine
1
https://github.com/gazay/gon
1
https://github.com/haml/haml
1
https://github.com/adamzaninovich/sounder
1
https://github.com/rails/actionpack-page_caching
1
https://github.com/auth0/omniauth-auth0
1
https://github.com/faye/faye-websocket-ruby
1
https://github.com/ManageIQ/kubeclient
1
https://github.com/panthomakos/lynx
1