Known vulnerabilities in ruby-rack (Debian package) - page 2

Vendor: Debian
Software CPE: cpe:2.3:o:debian:ruby-rack_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 33
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ruby-rack (Debian package) ruby-rack (Debian package) is affected by 33 known vulnerabilities: 1 high, 30 medium, 2 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27610
CWE-22 Medium
No
No
2.2.13-1~deb12u1 17.03.2025 SB2025031756
SB20250317118
SB20250317119
and 15 more
#VU105795 - Improper Output Neutralization for Logs
CVE-2025-27111
CWE-117 Medium
No
No
2.2.13-1~deb12u1 17.03.2025 SB2025031755
SB20250317119
SB2025031840
and 10 more
#VU105794 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-25184
CWE-93 Low
No
No
2.2.13-1~deb12u1 17.03.2025 SB2025031754
SB2025031758
SB20250317118
and 8 more
#VU87010 - Incorrect Regular Expression
CVE-2024-25126
CWE-185 Medium
No
No
2.1.4-3+deb11u2, 2.2.6.4-1+deb12u1 04.03.2024 SB2024030429
SB2024030544
SB2024041627
and 21 more
#VU87009 - Improper input validation
CVE-2024-26141
CWE-20 Medium
No
No
2.1.4-3+deb11u2, 2.2.6.4-1+deb12u1 04.03.2024 SB2024030429
SB2024030544
SB2024031240
and 22 more
#VU87008 - Improper input validation
CVE-2024-26146
CWE-20 Medium
No
No
2.1.4-3+deb11u2, 2.2.6.4-1+deb12u1 04.03.2024 SB2024030428
SB2024030544
SB2024031240
and 21 more
#VU74199 - Improper input validation
CVE-2023-27539
CWE-20 Medium
No
No
2.1.4-3+deb11u1 30.03.2023 SB2023033030
SB2023033041
SB2023041727
and 18 more
#VU73726 - Improper input validation
CVE-2023-27530
CWE-20 Medium
No
No
2.1.4-3+deb11u1 15.03.2023 SB2023031545
SB2023031551
SB2023042535
and 18 more
#VU71978 - Resource exhaustion
CVE-2022-44572
CWE-400 Medium
No
No
2.1.4-3+deb11u1 07.02.2023 SB2023020708
SB2023020711
SB2023030241
and 10 more
#VU71977 - Resource exhaustion
CVE-2022-44571
CWE-400 Medium
No
No
2.1.4-3+deb11u1 07.02.2023 SB2023020708
SB2023020711
SB2023030241
and 11 more
#VU71974 - Resource exhaustion
CVE-2022-44570
CWE-400 Medium
No
No
2.1.4-3+deb11u1 07.02.2023 SB2023020708
SB2023020711
SB2023030241
and 11 more
#VU64863 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-30123
CWE-78 High
No
No
2.1.4-3+deb11u1 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 14 more
#VU64862 - Improper input validation
CVE-2022-30122
CWE-20 Medium
No
No
2.1.4-3+deb11u1 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 8 more


Showing elements 21 - 40 out of 33