Known vulnerabilities in ruby-rack (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
ruby-rack (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:ruby-rack_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
39
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.5.2-3+deb8u3ubuntu1~esm11
1.6.4-3ubuntu0.2+esm10
1.6.4-4ubuntu0.2+esm10
2.0.7-2ubuntu0.1+esm10
2.1.4-5ubuntu1.2+esm3
2.2.7-1ubuntu0.7
3.1.16-0.1ubuntu0.3
2.0.7-2ubuntu0.1+esm9
2.1.4-5ubuntu1.2+esm2
2.2.7-1ubuntu0.6
3.1.16-0.1ubuntu0.2
1.6.4-3ubuntu0.2+esm9
1.6.4-4ubuntu0.2+esm9
2.0.7-2ubuntu0.1+esm8
2.1.4-5ubuntu1.2
2.2.7-1ubuntu0.5
3.1.16-0.1ubuntu0.1
2.2.7-1ubuntu0.4
2.2.7-1.1ubuntu0.25.04.3
2.1.4-5ubuntu1
3.1.12-1
3.1.9-1~exp1
3.1.9-2
3.0.8-4
3.0.8-3
3.0.8-2
3.0.8-1
3.0.0-1ubuntu1
3.0.0-1
2.2.6.4-1
2.2.7-1
2.2.7-1.1
2.1.1-1
2.1.1-2
2.1.1-3
2.1.1-5
2.1.1-6
2.1.4-1
2.1.4-2
2.2.3-1
2.1.4-3
2.1.4-4
2.1.4-5
2.2.3-2
2.2.3-3
2.2.3-4
2.2.4-1
2.2.4-2
2.2.4-3
3.1.16-0.1
2.2.7-1.1ubuntu0.2
2.2.7-1.1ubuntu0.25.04.2
1.5.2-3+deb8u3ubuntu1~esm10
1.6.4-3ubuntu0.2+esm8
1.6.4-4ubuntu0.2+esm8
2.0.7-2ubuntu0.1+esm7
2.1.4-5ubuntu1.1+esm2
2.2.7-1ubuntu0.3
2.2.7-1.1ubuntu0.25.04.1
2.2.7-1ubuntu0.2
2.2.7-1.1ubuntu0.1
2.1.4-5ubuntu1.1
2.2.4-3ubuntu0.2
2.2.7-1ubuntu0.1
2.2.4-3ubuntu0.1
Ubuntu Pro
2.0.7-2ubuntu0.1
2.1.1-5ubuntu0.1
1.6.4-3ubuntu0.2
1.6.4-4ubuntu0.2
2.1.1
2.1.1-4
2.0.7
2.0.6
1.6.4
1.5.2
1.3.5
2.0.7-1
2.0.7-2
1.6.4-4ubuntu0.1
1.6.4-3ubuntu0.1
2.0.6-3
2.0.5-1
2.0.5-2
2.0.6-1
2.0.6-2
1.6.4-6
1.6.4-5
1.5.2-3+deb8u1
1.5.2-3+deb8u1build0.15.04.1
1.6.4-4
1.6.4-1
1.6.4-2
1.6.4-3
1.5.2-4
1.2.2-1
1.2.2-2
1.3.1-1
1.3.5-1
1.4.0-1
1.4.1-1
1.4.1-2
1.4.1-2.1
1.5.2-1
1.5.2-2
1.5.2-3
Vulnerabilities (39)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU124838 - Resource exhaustion CVE-2026-34230 |
CWE-400 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124837 - Permissive Regular Expression CVE-2026-34763 |
CWE-625 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124836 - Incorrect Behavior Order: Validate Before Canonicalize CVE-2026-34786 |
CWE-180 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124835 - Improper Handling of Length Parameter Inconsistency CVE-2026-34831 |
CWE-130 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124834 - Interpretation Conflict CVE-2026-32762 |
CWE-436 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 |
||
| #VU124832 - Resource exhaustion CVE-2026-34826 |
CWE-400 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124830 - Improper Validation of Syntactic Correctness of Input CVE-2026-34835 |
CWE-1286 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 |
||
| #VU124828 - Permissive Regular Expression CVE-2026-34830 |
CWE-625 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124827 - Partial String Comparison CVE-2026-34785 |
CWE-187 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124826 - Resource exhaustion CVE-2026-34829 |
CWE-400 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124824 - Resource exhaustion CVE-2026-34827 |
CWE-400 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 |
||
| #VU124823 - Interpretation Conflict CVE-2026-26961 |
CWE-436 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU124822 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-26962 |
CWE-93 | Medium | 1.5.2-3+deb8u3ubuntu1~esm11, 1.6.4-3ubuntu0.2+esm10, 1.6.4-4ubuntu0.2+esm10, 2.0.7-2ubuntu0.1+esm10, 2.1.4-5ubuntu1.2+esm3, 2.2.7-1ubuntu0.7, 3.1.16-0.1ubuntu0.3 | 02.04.2026 |
SB2026040258 SB2026041762 SB20260507305 and 2 more |
||
| #VU123073 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-25500 |
CWE-79 | Low | 2.0.7-2ubuntu0.1+esm9, 2.1.4-5ubuntu1.2+esm2, 2.2.7-1ubuntu0.6, 3.1.16-0.1ubuntu0.2 | 19.02.2026 |
SB2026021924 SB2026030254 SB2026031327 and 1 more |
||
| #VU123072 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-22860 |
CWE-22 | Medium | 2.0.7-2ubuntu0.1+esm9, 2.1.4-5ubuntu1.2+esm2, 2.2.7-1ubuntu0.6, 3.1.16-0.1ubuntu0.2 | 19.02.2026 |
SB2026021924 SB2026030254 SB2026031327 and 1 more |
||
| #VU116897 - Resource exhaustion CVE-2025-61919 |
CWE-400 | Medium | 1.6.4-3ubuntu0.2+esm9, 1.6.4-4ubuntu0.2+esm9, 2.0.7-2ubuntu0.1+esm8, 2.1.4-5ubuntu1.2, 2.2.7-1ubuntu0.5, 3.1.16-0.1ubuntu0.1 | 10.10.2025 |
SB2025101026 SB2025110346 SB2025110402 and 17 more |
||
| #VU116895 - Exposure of sensitive information to an unauthorized actor CVE-2025-61780 |
CWE-200 | Medium | 1.6.4-3ubuntu0.2+esm9, 1.6.4-4ubuntu0.2+esm9, 2.0.7-2ubuntu0.1+esm8, 2.1.4-5ubuntu1.2, 2.2.7-1ubuntu0.5, 3.1.16-0.1ubuntu0.1 | 10.10.2025 |
SB2025101026 SB2025110402 SB2025110465 and 6 more |
||
| #VU116667 - Resource exhaustion CVE-2025-61770 |
CWE-400 | Medium | 1.6.4-3ubuntu0.2+esm9, 1.6.4-4ubuntu0.2+esm9, 2.0.7-2ubuntu0.1+esm8, 2.1.4-5ubuntu1.2, 2.2.7-1ubuntu0.5, 3.1.16-0.1ubuntu0.1 | 07.10.2025 |
SB2025100725 SB2025100907 SB2025110346 and 17 more |
||
| #VU116666 - Resource exhaustion CVE-2025-61771 |
CWE-400 | Medium | 1.6.4-3ubuntu0.2+esm9, 1.6.4-4ubuntu0.2+esm9, 2.0.7-2ubuntu0.1+esm8, 2.1.4-5ubuntu1.2, 2.2.7-1ubuntu0.5, 3.1.16-0.1ubuntu0.1 | 07.10.2025 |
SB2025100725 SB2025100907 SB2025110346 and 15 more |
||
| #VU116665 - Resource exhaustion CVE-2025-61772 |
CWE-400 | Medium | 1.6.4-3ubuntu0.2+esm9, 1.6.4-4ubuntu0.2+esm9, 2.0.7-2ubuntu0.1+esm8, 2.1.4-5ubuntu1.2, 2.2.7-1ubuntu0.5, 3.1.16-0.1ubuntu0.1 | 07.10.2025 |
SB2025100725 SB2025100907 SB2025110346 and 16 more |
Showing elements 1 - 20 out of 39