Known vulnerabilities in rubygem-rack

Vendor: openEuler
Software: rubygem-rack
Software CPE: cpe:2.3:o:openeuler:rubygem-rack:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rubygem-rack rubygem-rack is affected by 14 known vulnerabilities: 2 high, 10 medium, 2 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111989 - Resource exhaustion
CVE-2025-46727		 CWE-400 Medium
No
No
 2.2.3.1-8, 2.2.3.1-9, 2.2.4-12 27.06.2025 SB2025062709
SB2025062710
SB2025062711
and 24 more
#VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27610		 CWE-22 Medium
No
No
 2.2.3.1-7 17.03.2025 SB2025031756
SB20250317118
SB20250317119
and 15 more
#VU105795 - Improper Output Neutralization for Logs
CVE-2025-27111		 CWE-117 Medium
No
No
 2.2.3.1-7 17.03.2025 SB2025031755
SB20250317119
SB2025031840
and 10 more
#VU105794 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-25184		 CWE-93 Low
No
No
 2.2.3.1-7 17.03.2025 SB2025031754
SB2025031758
SB20250317118
and 8 more
#VU87010 - Incorrect Regular Expression
CVE-2024-25126		 CWE-185 Medium
No
No
 2.2.3.1-4, 2.2.3.1-5 04.03.2024 SB2024030429
SB2024030544
SB2024041627
and 21 more
#VU87009 - Improper input validation
CVE-2024-26141		 CWE-20 Medium
No
No
 2.2.3.1-4, 2.2.3.1-5 04.03.2024 SB2024030429
SB2024030544
SB2024031240
and 22 more
#VU87008 - Improper input validation
CVE-2024-26146		 CWE-20 Medium
No
No
 2.2.3.1-7, 2.2.3.1-8 04.03.2024 SB2024030428
SB2024030544
SB2024031240
and 21 more
#VU71978 - Resource exhaustion
CVE-2022-44572		 CWE-400 Medium
No
No
 2.2.3.1-4, 2.2.3.1-5 07.02.2023 SB2023020708
SB2023020711
SB2023030241
and 10 more
#VU71977 - Resource exhaustion
CVE-2022-44571		 CWE-400 Medium
No
No
 2.2.3.1-4, 2.2.3.1-5 07.02.2023 SB2023020708
SB2023020711
SB2023030241
and 11 more
#VU71974 - Resource exhaustion
CVE-2022-44570		 CWE-400 Medium
No
No
 2.2.3.1-4, 2.2.3.1-5 07.02.2023 SB2023020708
SB2023020711
SB2023030241
and 11 more
#VU67621 - Missing Support for Integrity Check
CVE-2020-8184		 CWE-353 Low
No
No
 2.2.3.1-1 23.09.2022 SB2022070222
SB2022092345
SB2021040632
and 6 more
#VU64863 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-30123		 CWE-78 High
No
No
 2.2.3.1-1 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 15 more
#VU64862 - Improper input validation
CVE-2022-30122		 CWE-20 Medium
No
No
 2.2.3.1-1 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 9 more
#VU1044 - Improper input validation
CVE-2016-4391		 CWE-20 High
No
No
 2.2.3.1-4 20.10.2016 SB2024072110