Known vulnerabilities in ruby-sinatra (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
ruby-sinatra (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:ruby-sinatra_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.4.7-3ubuntu0.1~esm3
1.4.8-1ubuntu0.1~esm3
2.0.8.1-1ubuntu0.1~esm3
2.0.8.1-2+deb11u1ubuntu0.1~esm1
2.0.8.1-2+deb11u1
4.1.1-4
4.1.1-3ubuntu1
4.1.1-3
4.1.1-1
4.1.1-2
2.2.2-1
3.0.3-1
3.0.5-1
3.0.5-2
3.0.5-3
4.1.1-5
3.2.0-1
3.0.5-3ubuntu1
1.4.7-3ubuntu0.1~esm2
1.4.8-1ubuntu0.1~esm2
2.0.8.1-1ubuntu0.1~esm2
2.0.8.1-2+deb11u1build0.22.04.1
2.0.8.1
2.0.8.1-2
2.0.5
1.4.8
1.4.7
1.4.3
1.2.6
1.2.6-1+build1
2.0.8.1-1
2.0.5-4ubuntu1
2.0.5-4
2.0.5-3
2.0.5-2
1.4.8-1
1.4.7-5
1.4.7-4
1.4.7-1
1.4.7-2
1.4.7-3
1.2.3-1
1.2.6-1
1.3.2-1
1.3.2-2
1.4.3-1
1.4.3-2
1.4.5-1
1.4.6-1
1.4.6-2
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU116912 - Incorrect Regular Expression CVE-2025-61921 |
CWE-185 | Medium | 1.4.7-3ubuntu0.1~esm3, 1.4.8-1ubuntu0.1~esm3, 2.0.8.1-1ubuntu0.1~esm3, 2.0.8.1-2+deb11u1ubuntu0.1~esm1 | 13.10.2025 |
SB2025101337 SB2026073078 |
||
| #VU71475 - Download of Code Without Integrity Check CVE-2022-45442 |
CWE-494 | High | 1.4.7-3ubuntu0.1~esm2, 1.4.8-1ubuntu0.1~esm2, 2.0.8.1-1ubuntu0.1~esm2, 2.0.8.1-2+deb11u1build0.22.04.1 | 24.01.2023 |
SB2023012439 SB2023012441 SB2023012460 and 11 more |
||
| #VU63415 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-29970 |
CWE-22 | Medium | 1.4.7-3ubuntu0.1~esm2, 1.4.8-1ubuntu0.1~esm2, 2.0.8.1-1ubuntu0.1~esm2, 2.0.8.1-2+deb11u1build0.22.04.1 | 19.05.2022 |
SB2022051903 SB2022051911 SB2022061573 and 7 more |