Rack vulnerabilities
41 CVEs and advisories name Rack as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-27610Local File Inclusion in Rack::Static
- CVE-2025-27111Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection
- CVE-2025-25184Possible Log Injection in Rack::CommonLogger
- CVE-2024-39316Rack ReDoS Vulnerability in HTTP Accept Headers Parsing
- CVE-2024-35231rack-contrib vulnerable to Denial of Service due to the unconstrained value of the incoming "profiler_runs" parameter
- CVE-2024-26141Possible DoS Vulnerability with Range Header in Rack
- CVE-2024-25126Rack ReDos in content type parsing (2nd degree polynomial)
- CVE-2024-26146Possible Denial of Service Vulnerability in Rack Header Parsing
- CVE-2019-16782Possible Information Leak / Session Hijack Vulnerability in Rack
- CVE-2018-16471There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11.
- CVE-2018-16470There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6.