rubygems
High Security Advisories for https://github.com/rack/rack in rubygems Clear Filters
High
11 months ago
Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing
rubygems
rack
High
11 months ago
Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
rubygems
rack
High
11 months ago
Rack: Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
rubygems
rack
High
11 months ago
Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)
rubygems
rack
High
11 months ago
Rack has an unsafe default in Rack::QueryParser allows params_limit bypass via semicolon-separated parameters
rubygems
rack
High
about 6 years ago
Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names
rubygems
rack
Filter by Severity
Filter by Package
nokogiri
26
rack
18
rubygems-update
13
activerecord
12
actionpack
11
oj
10
decidim
6
puma
5
passenger
5
grpcio
4
camaleon_cms
4
avo
4
grpc
4
actionview
4
json
4
webrick
4
phlex
4
ruby-saml
3
decidim-core
3
org.jruby:jruby-stdlib
3
sanitize
3
fluentd
3
mcp
3
private_address_check
2
spree_api
2
faye
2
doorkeeper
2
cocoapods-downloader
2
cgi
2
activestorage
2
pageflow
2
publify_core
2
rexml
2
mini_magick
2
git
2
pghero
2
activeadmin
2
view_component
2
com.google.protobuf:protobuf-kotlin
2
loofah
2
omniauth
2
bundler
2
openssl
2
echor
2
red-arrow
2
io.grpc:grpc-protobuf
2
bsv-sdk
2
addressable
2
google-protobuf
2
httparty
2
sinatra
2
puppet
2
com.google.protobuf:protobuf-java
2
oauth
2
sidekiq
2
openc3
2
iodine
2
pay
2
rails
2
dragonfly
2
yard
2
open-uri-cached
1
elastic-apm
1
webbynode
1
fastreader
1
kajam
1
rails-html-sanitizer
1
aescrypt
1
command_wrap
1
curl
1
karteek-docsplit
1
multi_xml
1
rgpg
1
activesupport
1
foreman_kubevirt
1
rails_admin
1
fog-dragonfly
1
metasploit-framework
1
commonmarker
1
sqlite-vec
1
bson
1
lawn-login
1
mixlib-archive
1
activejob
1
thumbshooter
1
sigstore
1
spree_storefront
1
thin
1
RedCloth
1
logstash
1
git-fastclone
1
activerecord-jdbc-adapter
1
omniauth-microsoft_graph
1
gollum
1
Autolab
1
mqtt
1
foreman_ansible
1
exiftool_vendored
1
solidus_core
1
rack-contrib
1
blazer
1
css_parser
1
sorcery
1
decidim-meetings
1
rubyipmi
1
yajl-ruby
1
devise_masquerade
1
com.google.protobuf:protobuf-javalite
1
fluentd-ui
1
kcapifony
1
sprout
1
chartkick
1
sidekiq-unique-jobs
1
mail
1
trestle-auth
1
decidim-comments
1
lynx
1
encoded_id-rails
1
sprockets
1
com.google.protobuf:protobuf-kotlin-lite
1
brbackup
1
fileutils
1
opensearch-ruby
1
stimulus_reflex
1
cap-strap
1
rdoc
1
concurrent-ruby
1
arabic-prawn
1
lean-ruport
1
goliath
1
rwiki
1
omniauth-facebook
1
backup_checksum
1
moped
1
sfpagent
1
jruby-openssl
1
carrierwave
1
erb
1
ruby_parser-legacy
1
turbo_boost-commands
1
oauth2
1
alchemy_cms
1
arr-pm
1
datadog
1
sqlite-vec
1
em-http-request
1
rswag
1
katalyst-koi
1
prosemirror_to_html
1
sqlite-vec
1
spree
1
administrate
1
narou
1
savon
1
ruby-lsp
1
uri
1
decidim-api
1
jekyll
1
rack-cors
1
geminabox
1
spree_core
1
time
1
gollum-lib
1
sounder
1
bsv-wallet
1
asciidoctor
1
spina
1
omniauth-auth0
1
omniauth-apple
1
ox
1
redcarpet
1
logstash-core
1
devise
1
point-cli
1
faraday
1
em-imap
1
omniauth-saml
1
hammer_cli_foreman
1
websocket-extensions
1
foreman_fog_proxmox
1
ffi
1
reel
1
activeresource
1
sqlite-vec
1
dependabot-common
1
tzinfo
1
codders-dataset
1
minitar
1
shakapacker
1
websocket-driver
1
crack
1
decidim-verifications
1
user_agent_parser
1
pgsync
1
matestack-ui-core
1
tmpdir
1
shakapacker
1
decidim-decidim_awesome
1
i18n
1
net-imap
1
Filter by Repository
https://github.com/sparklemotion/nokogiri
20
https://github.com/rails/rails
15
https://github.com/rack/rack
10
https://github.com/rubygems/rubygems
7
https://github.com/owen2345/camaleon-cms
4
https://github.com/decidim/decidim
4
https://github.com/phusion/passenger
3
https://github.com/ruby/webrick
3
https://github.com/rgrove/sanitize
3
https://github.com/phlex-ruby/phlex
3
https://github.com/grpc/grpc
3
https://github.com/avo-hq/avo
3
https://github.com/puma/puma
3
https://github.com/protocolbuffers/protobuf
2
https://github.com/markevans/dragonfly
2
https://github.com/activeadmin/activeadmin
2
https://github.com/ankane/pghero
2
https://github.com/sinatra/sinatra
2
https://github.com/ruby/openssl
2
https://github.com/doorkeeper-gem/doorkeeper
2
https://github.com/OpenC3/cosmos
2
https://github.com/flavorjones/loofah
2
https://github.com/lsegal/yard
2
https://github.com/ruby/rexml
2
https://github.com/CocoaPods/cocoapods-downloader
2
https://github.com/faye/faye
2
https://github.com/jtdowney/private_address_check
2
https://github.com/spree/spree
2
https://github.com/ruby-git/ruby-git
2
https://github.com/codevise/pageflow
2
https://github.com/onelogin/ruby-saml
1
https://github.com/VulnSphere/LLMVulnSphere
1
https://github.com/adamzaninovich/sounder
1
https://github.com/boazsegev/iodine
1
https://github.com/tigris/open-uri-cached
1
https://github.com/rubygems/bundler
1
https://github.com/ruby/time
1
https://github.com/rails/rails-html-sanitizer
1
https://github.com/TrestleAdmin/trestle-auth
1
https://github.com/gettalong/kramdown
1
https://github.com/auth0/omniauth-auth0
1
https://github.com/synth/omniauth-microsoft_graph
1
https://github.com/rapid7/metasploit-framework
1
https://github.com/jnunemaker/httparty
1
https://github.com/ffi/ffi
1
https://github.com/sparklemotion/mechanize
1
https://github.com/rails/activeresource
1
https://github.com/thoughtbot/clearance
1
https://github.com/mikel/mail
1
https://github.com/Sorcery/sorcery
1
https://github.com/exiftool-rb/exiftool_vendored.rb
1
https://github.com/halostatue/minitar
1
https://github.com/ua-parser/uap-ruby
1
https://github.com/macournoyer/thin
1
https://github.com/ConradIrwin/em-imap
1
https://github.com/GNOME/libxml2
1
https://github.com/njh/ruby-mqtt
1
https://github.com/gollum/gollum
1
https://github.com/madler/zlib
1
https://github.com/decidim-ice/decidim-module-decidim_awesome
1
https://github.com/minimagick/minimagick
1
https://github.com/aws/aws-sdk-ruby
1
https://github.com/mongoid/moped
1
https://github.com/asciidoctor/asciidoctor
1
https://github.com/webbynode/webbynode
1
https://github.com/opensearch-project/opensearch-ruby
1
https://github.com/ruby/uri
1
https://github.com/ohler55/ox
1
https://github.com/railsadminteam/rails_admin
1
https://github.com/thoughtbot/administrate
1
https://github.com/presidentbeef/rails-security-history
1
https://github.com/tzinfo/tzinfo
1
https://github.com/sparklemotion/nekohtml
1
https://github.com/brianmario/yajl-ruby
1
https://github.com/oivoodoo/devise_masquerade
1
https://github.com/stimulusreflex/stimulus_reflex
1
https://github.com/ankane/blazer
1
https://github.com/flori/json
1
https://github.com/nhosoya/omniauth-apple
1
https://github.com/rswag/rswag
1
https://github.com/jordansissel/ruby-arr-pm
1
https://github.com/SAML-Toolkits/ruby-saml
1
https://github.com/ManageIQ/kubeclient
1
https://github.com/faye/faye-websocket-ruby
1
https://github.com/geminabox/geminabox
1
https://github.com/faye/websocket-extensions-ruby
1
https://github.com/carrierwaveuploader/carrierwave
1
https://github.com/simi/omniauth-facebook
1
https://github.com/denkGroot/Spina
1
https://github.com/sidekiq/sidekiq
1
https://github.com/ruby/fileutils
1
https://github.com/theforeman/foreman_fog_proxmox
1
https://github.com/rails/sprockets
1
https://github.com/ruby/tmpdir
1
https://github.com/zendesk/samlr
1
https://github.com/mhenrixon/sidekiq-unique-jobs
1
https://github.com/omniauth/omniauth
1
https://github.com/mperham/sidekiq
1
https://github.com/elastic/apm-agent-ruby
1
https://github.com/datamapper/extlib
1
https://github.com/nov/json-jwt
1
https://github.com/solidusio/solidus
1
https://github.com/matestack/matestack-ui-core
1
https://github.com/omniauth/omniauth-rails
1
https://github.com/jgarber/redcloth
1
https://github.com/cyu/rack-cors
1
https://github.com/square/git-fastclone
1
https://github.com/theforeman/foreman_ansible
1
https://github.com/ruby/date
1
https://github.com/igrigorik/em-http-request
1
https://github.com/autolab/Autolab
1
https://github.com/sferik/multi_xml
1
https://github.com/github/cmark-gfm
1
https://github.com/panthomakos/lynx
1
https://github.com/savonrb/nori
1
https://github.com/whiteleaf7/narou
1
https://github.com/ruby/json
1
https://github.com/rcook/rgpg
1
https://github.com/chef/mixlib-archive
1
https://github.com/cgriego/active_attr
1
https://github.com/ankane/chartkick.js
1
https://github.com/Gurpartap/aescrypt
1
https://github.com/svenfuchs/i18n
1
https://github.com/fluent/fluentd-ui
1
https://github.com/Katello/katello
1
https://github.com/jekyll/jekyll
1
https://github.com/publify/publify
1
https://github.com/mongodb/bson-ruby
1
https://github.com/ruby/ruby
1
https://github.com/github/view_component
1
https://github.com/ruby/rdoc
1
https://github.com/hopsoft/turbo_boost-commands
1
https://github.com/zenspider/ruby_parser-legacy
1
https://github.com/bvsatyaram/random_password_generator
1
https://github.com/postrank-labs/goliath
1
https://github.com/jnunemaker/crack
1
https://github.com/elastic/logstash
1
https://github.com/codders/dataset
1
https://github.com/rack/rack-contrib
1
https://github.com/vmg/redcarpet
1
https://github.com/ankane/pgsync
1
https://github.com/pay-rails/pay
1
https://github.com/oauth-xx/oauth-ruby
1
https://github.com/heartcombo/devise
1
https://github.com/etaminstudio/prosemirror_to_html
1
https://github.com/stevegeek/encoded_id-rails
1
https://github.com/sporkmonger/addressable
1
https://github.com/svenfuchs/safemode
1