Known vulnerabilities in Phusion Passenger

Software CPE: cpe:2.3:a:phusion_b_v:phusion_passenger:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Phusion Passenger Phusion Passenger is affected by 7 known vulnerabilities: 1 medium, 6 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104968 - Improper input validation
CVE-2025-26803
CWE-20 Medium
No
No
6.0.26 27.02.2025 SB2025022767
SB2025022772
#VU18066 - UNIX Symbolic Link (Symlink) Following
CVE-2017-16355
CWE-61 Low
No
No
5.1.11 25.03.2019 SB2017121449
SB2019032502
#VU13991 - Improper Access Control
CVE-2018-12028
CWE-284 Low
No
No
5.3.2 24.07.2018 SB2018072402
SB2018072403
#VU13990 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-12029
CWE-362 Low
No
No
5.3.2 24.07.2018 SB2018072402
SB2018072403
#VU13989 - Permissions, Privileges, and Access Controls
CVE-2018-12026
CWE-264 Low
No
No
5.3.2 24.07.2018 SB2018072402
SB2018072403
#VU13988 - Exposure of sensitive information to an unauthorized actor
CVE-2018-12027
CWE-200 Low
No
No
5.3.2 23.07.2018 SB2018072402
SB2018072403
#VU40538 - Improper input validation
CVE-2015-7519
CWE-20 Low
No
No
- 08.01.2016 SB2016010802