Known vulnerabilities in Sinatra

Vendor: Sinatra
Software: Sinatra
Software CPE: cpe:2.3:a:sinatra:sinatra:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Sinatra Sinatra is affected by 7 known vulnerabilities: 1 high, 3 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116912 - Incorrect Regular Expression
CVE-2025-61921
CWE-185 Medium
No
No
4.2.0 13.10.2025 SB2025101337
SB2026073078
#VU103627 - Reliance on Untrusted Inputs in a Security Decision
CVE-2024-21510
CWE-807 Medium
No
No
4.1.0 05.02.2025 SB2025020513
SB2025020516
SB20250328438
#VU71475 - Download of Code Without Integrity Check
CVE-2022-45442
CWE-494 High
No
No
2.2.3, 3.0.4 24.01.2023 SB2023012439
SB2023012441
SB2023012460
and 11 more
#VU63415 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29970
CWE-22 Medium
No
No
2.2.0 19.05.2022 SB2022051903
SB2022051911
SB2022061573
and 7 more
#VU13179 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-11627
CWE-79 Low
No
No
2.0.2 01.06.2018 SB2018060501
SB2018061423
SB2018061424
#VU11074 - Information Exposure Through Timing Discrepancy
CVE-2018-1000119
CWE-208 Low
No
No
- 14.03.2018 SB2018030606
SB2018041039
SB2018071712
#VU10819 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-7212
CWE-22 Low
No
No
- 02.03.2018 SB2018021211