Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:gem/rack@1.3.2
Typegem
Namespace
Namerack
Version1.3.2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-22eh-9wun-h7b5
vulnerability_id VCID-22eh-9wun-h7b5
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-26962.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-26962.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-26962
reference_id
reference_type
scores
0
value 0.00023
scoring_system epss
scoring_elements 0.06645
published_at 2026-06-11T12:55:00Z
1
value 0.00023
scoring_system epss
scoring_elements 0.06667
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-26962
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26962
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26962
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-26962.yml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-26962.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-26962
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-26962
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454511
reference_id 2454511
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454511
8
reference_url https://github.com/advisories/GHSA-rx22-g9mx-qrhv
reference_id GHSA-rx22-g9mx-qrhv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rx22-g9mx-qrhv
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-rx22-g9mx-qrhv
reference_id GHSA-rx22-g9mx-qrhv
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-02T18:31:17Z/
url https://github.com/rack/rack/security/advisories/GHSA-rx22-g9mx-qrhv
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-26962, GHSA-rx22-g9mx-qrhv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-22eh-9wun-h7b5
1
url VCID-34sm-19kr-1uby
vulnerability_id VCID-34sm-19kr-1uby
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61772.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61772.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61772
reference_id
reference_type
scores
0
value 0.00324
scoring_system epss
scoring_elements 0.55803
published_at 2026-06-11T12:55:00Z
1
value 0.00355
scoring_system epss
scoring_elements 0.583
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61772
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61772
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61772
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1117627
reference_id 1117627
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1117627
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2402200
reference_id 2402200
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2402200
7
reference_url https://github.com/rack/rack/commit/589127f4ac8b5cf11cf88fb0cd116ffed4d2181e
reference_id 589127f4ac8b5cf11cf88fb0cd116ffed4d2181e
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-07T17:51:19Z/
url https://github.com/rack/rack/commit/589127f4ac8b5cf11cf88fb0cd116ffed4d2181e
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-61772
reference_id CVE-2025-61772
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-61772
9
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-61772.yml
reference_id CVE-2025-61772.YML
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-61772.yml
10
reference_url https://github.com/rack/rack/commit/d869fed663b113b95a74ad53e1b5cae6ab31f29e
reference_id d869fed663b113b95a74ad53e1b5cae6ab31f29e
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-07T17:51:19Z/
url https://github.com/rack/rack/commit/d869fed663b113b95a74ad53e1b5cae6ab31f29e
11
reference_url https://github.com/rack/rack/commit/e08f78c656c9394d6737c022bde087e0f33336fd
reference_id e08f78c656c9394d6737c022bde087e0f33336fd
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-07T17:51:19Z/
url https://github.com/rack/rack/commit/e08f78c656c9394d6737c022bde087e0f33336fd
12
reference_url https://github.com/advisories/GHSA-wpv5-97wm-hp9c
reference_id GHSA-wpv5-97wm-hp9c
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wpv5-97wm-hp9c
13
reference_url https://github.com/rack/rack/security/advisories/GHSA-wpv5-97wm-hp9c
reference_id GHSA-wpv5-97wm-hp9c
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-07T17:51:19Z/
url https://github.com/rack/rack/security/advisories/GHSA-wpv5-97wm-hp9c
14
reference_url https://access.redhat.com/errata/RHSA-2025:19512
reference_id RHSA-2025:19512
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19512
15
reference_url https://access.redhat.com/errata/RHSA-2025:19513
reference_id RHSA-2025:19513
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19513
16
reference_url https://access.redhat.com/errata/RHSA-2025:19647
reference_id RHSA-2025:19647
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19647
17
reference_url https://access.redhat.com/errata/RHSA-2025:19719
reference_id RHSA-2025:19719
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19719
18
reference_url https://access.redhat.com/errata/RHSA-2025:19733
reference_id RHSA-2025:19733
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19733
19
reference_url https://access.redhat.com/errata/RHSA-2025:19734
reference_id RHSA-2025:19734
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19734
20
reference_url https://access.redhat.com/errata/RHSA-2025:19736
reference_id RHSA-2025:19736
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19736
21
reference_url https://access.redhat.com/errata/RHSA-2025:19800
reference_id RHSA-2025:19800
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19800
22
reference_url https://access.redhat.com/errata/RHSA-2025:19948
reference_id RHSA-2025:19948
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19948
23
reference_url https://access.redhat.com/errata/RHSA-2025:20962
reference_id RHSA-2025:20962
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:20962
24
reference_url https://access.redhat.com/errata/RHSA-2025:21036
reference_id RHSA-2025:21036
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:21036
25
reference_url https://usn.ubuntu.com/7960-1/
reference_id USN-7960-1
reference_type
scores
url https://usn.ubuntu.com/7960-1/
fixed_packages
0
url pkg:gem/rack@2.2.19
purl pkg:gem/rack@2.2.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-q6h3-j4b9-4kfg
12
vulnerability VCID-rb6e-p5hw-kfa6
13
vulnerability VCID-s6ny-5vqq-uqg7
14
vulnerability VCID-t2vh-fkgc-tba9
15
vulnerability VCID-vxsm-fcuq-y7e8
16
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.19
1
url pkg:gem/rack@3.0.0.beta1
purl pkg:gem/rack@3.0.0.beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nesq-w996-akh4
22
vulnerability VCID-q6h3-j4b9-4kfg
23
vulnerability VCID-rb6e-p5hw-kfa6
24
vulnerability VCID-s6ny-5vqq-uqg7
25
vulnerability VCID-t2vh-fkgc-tba9
26
vulnerability VCID-vxsm-fcuq-y7e8
27
vulnerability VCID-w8dy-4cvu-ckcm
28
vulnerability VCID-wvjz-yynu-qbbf
29
vulnerability VCID-ym3c-dbhb-e3fs
30
vulnerability VCID-yybg-erer-jfaw
31
vulnerability VCID-zmuu-6s9z-cqd2
32
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.0.beta1
2
url pkg:gem/rack@3.1.17
purl pkg:gem/rack@3.1.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-q6h3-j4b9-4kfg
12
vulnerability VCID-rb6e-p5hw-kfa6
13
vulnerability VCID-s6ny-5vqq-uqg7
14
vulnerability VCID-t2vh-fkgc-tba9
15
vulnerability VCID-vxsm-fcuq-y7e8
16
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.17
3
url pkg:gem/rack@3.2.2
purl pkg:gem/rack@3.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-q6h3-j4b9-4kfg
12
vulnerability VCID-rb6e-p5hw-kfa6
13
vulnerability VCID-s6ny-5vqq-uqg7
14
vulnerability VCID-t2vh-fkgc-tba9
15
vulnerability VCID-vxsm-fcuq-y7e8
16
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.2
aliases CVE-2025-61772, GHSA-wpv5-97wm-hp9c
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-34sm-19kr-1uby
2
url VCID-3eyy-mgk4-xue4
vulnerability_id VCID-3eyy-mgk4-xue4
summary 
Multiple vulnerabilities have been found in Rack, the worst of
    which allow execution of arbitrary code.
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html
1
reference_url http://rack.github.com
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rack.github.com
2
reference_url http://rack.github.com/
reference_id
reference_type
scores
url http://rack.github.com/
3
reference_url http://rhn.redhat.com/errata/RHSA-2013-0544.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0544.html
4
reference_url http://rhn.redhat.com/errata/RHSA-2013-0548.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0548.html
5
reference_url https://access.redhat.com/errata/RHSA-2013:0544
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2013:0544
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0183.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0183.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-0183
reference_id
reference_type
scores
0
value 0.01824
scoring_system epss
scoring_elements 0.83354
published_at 2026-06-12T12:55:00Z
1
value 0.01824
scoring_system epss
scoring_elements 0.83293
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-0183
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=895282
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=895282
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0183
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0183
10
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
11
reference_url https://github.com/rack/rack/commit/548b9af2dc0059f4c0c19728624448d84de450ff
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/commit/548b9af2dc0059f4c0c19728624448d84de450ff
12
reference_url https://github.com/rack/rack/commit/f95113402b7239f225282806673e1b6424522b18
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/commit/f95113402b7239f225282806673e1b6424522b18
13
reference_url https://groups.google.com/forum/#%21topic/rack-devel/7ZKPNAjgRSs
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#%21topic/rack-devel/7ZKPNAjgRSs
14
reference_url https://groups.google.com/forum/#%21topic/rack-devel/-MWPHDeGWtI
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#%21topic/rack-devel/-MWPHDeGWtI
15
reference_url https://groups.google.com/forum/#!topic/rack-devel/7ZKPNAjgRSs
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!topic/rack-devel/7ZKPNAjgRSs
16
reference_url https://groups.google.com/forum/#!topic/rack-devel/-MWPHDeGWtI
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!topic/rack-devel/-MWPHDeGWtI
17
reference_url http://www.debian.org/security/2013/dsa-2783
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2013/dsa-2783
18
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698440
reference_id 698440
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698440
19
reference_url https://access.redhat.com/security/cve/CVE-2013-0183
reference_id CVE-2013-0183
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/cve/CVE-2013-0183
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-0183
reference_id CVE-2013-0183
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-0183
21
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2013-0183.yml
reference_id CVE-2013-0183.YML
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2013-0183.yml
22
reference_url https://github.com/advisories/GHSA-3pxh-h8hw-mj8w
reference_id GHSA-3pxh-h8hw-mj8w
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3pxh-h8hw-mj8w
23
reference_url https://security.gentoo.org/glsa/201405-10
reference_id GLSA-201405-10
reference_type
scores
url https://security.gentoo.org/glsa/201405-10
fixed_packages
0
url pkg:gem/rack@1.3.8
purl pkg:gem/rack@1.3.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3eyy-mgk4-xue4
3
vulnerability VCID-3kfb-z5dw-hkfv
4
vulnerability VCID-3srh-99bk-ruft
5
vulnerability VCID-5a6b-yemd-mqgb
6
vulnerability VCID-7m5s-fgj3-v3c5
7
vulnerability VCID-7t6e-rm2b-s7a1
8
vulnerability VCID-8fp2-gkct-2fcu
9
vulnerability VCID-9h1q-9jzw-1bdk
10
vulnerability VCID-abcn-y96c-dfe3
11
vulnerability VCID-dfww-bthd-m3c5
12
vulnerability VCID-dzcy-yd29-x3fm
13
vulnerability VCID-e9ps-payd-abeu
14
vulnerability VCID-eduz-d41z-ekfw
15
vulnerability VCID-etn1-jujr-dkfu
16
vulnerability VCID-fcfm-c4dz-v3es
17
vulnerability VCID-gjjy-a7wb-qqaa
18
vulnerability VCID-gsss-za6y-c7hk
19
vulnerability VCID-guej-7tq7-fbb7
20
vulnerability VCID-hnvx-fk27-9keb
21
vulnerability VCID-mkxe-9gpy-ebdp
22
vulnerability VCID-mqhf-duvt-7yfk
23
vulnerability VCID-nd2m-v3wz-xfhw
24
vulnerability VCID-nejs-mnc1-syc5
25
vulnerability VCID-nesq-w996-akh4
26
vulnerability VCID-pyme-h5rf-bfhx
27
vulnerability VCID-q6h3-j4b9-4kfg
28
vulnerability VCID-rb6e-p5hw-kfa6
29
vulnerability VCID-rube-m1vm-d7hd
30
vulnerability VCID-s6ny-5vqq-uqg7
31
vulnerability VCID-t2vh-fkgc-tba9
32
vulnerability VCID-u393-uzrh-4bea
33
vulnerability VCID-unav-qy3e-2bd5
34
vulnerability VCID-venj-nk2m-pkd2
35
vulnerability VCID-vxsm-fcuq-y7e8
36
vulnerability VCID-w8dy-4cvu-ckcm
37
vulnerability VCID-wvjz-yynu-qbbf
38
vulnerability VCID-ym3c-dbhb-e3fs
39
vulnerability VCID-yse4-vy3c-xfea
40
vulnerability VCID-ytrg-5hh7-7qcq
41
vulnerability VCID-yybg-erer-jfaw
42
vulnerability VCID-zmuu-6s9z-cqd2
43
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.3.8
1
url pkg:gem/rack@1.4.3
purl pkg:gem/rack@1.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3kfb-z5dw-hkfv
3
vulnerability VCID-3srh-99bk-ruft
4
vulnerability VCID-5a6b-yemd-mqgb
5
vulnerability VCID-7m5s-fgj3-v3c5
6
vulnerability VCID-7t6e-rm2b-s7a1
7
vulnerability VCID-8fp2-gkct-2fcu
8
vulnerability VCID-9h1q-9jzw-1bdk
9
vulnerability VCID-abcn-y96c-dfe3
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-rube-m1vm-d7hd
28
vulnerability VCID-s6ny-5vqq-uqg7
29
vulnerability VCID-t2vh-fkgc-tba9
30
vulnerability VCID-u393-uzrh-4bea
31
vulnerability VCID-unav-qy3e-2bd5
32
vulnerability VCID-venj-nk2m-pkd2
33
vulnerability VCID-vxsm-fcuq-y7e8
34
vulnerability VCID-w8dy-4cvu-ckcm
35
vulnerability VCID-wvjz-yynu-qbbf
36
vulnerability VCID-ym3c-dbhb-e3fs
37
vulnerability VCID-yse4-vy3c-xfea
38
vulnerability VCID-ytrg-5hh7-7qcq
39
vulnerability VCID-yybg-erer-jfaw
40
vulnerability VCID-zmuu-6s9z-cqd2
41
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.4.3
aliases CVE-2013-0183, GHSA-3pxh-h8hw-mj8w, OSV-89320
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3eyy-mgk4-xue4
3
url VCID-3kfb-z5dw-hkfv
vulnerability_id VCID-3kfb-z5dw-hkfv
summary 
Multiple vulnerabilities have been found in Rack, the worst of
    which allow execution of arbitrary code.
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html
1
reference_url http://rack.github.com/
reference_id
reference_type
scores
url http://rack.github.com/
2
reference_url http://rhn.redhat.com/errata/RHSA-2013-0686.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0686.html
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0263.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0263.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-0263
reference_id
reference_type
scores
0
value 0.16071
scoring_system epss
scoring_elements 0.94939
published_at 2026-06-11T12:55:00Z
1
value 0.16071
scoring_system epss
scoring_elements 0.94956
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-0263
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=909071
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=909071
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0263
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0263
7
reference_url https://gist.github.com/codahale/f9f3781f7b54985bee94
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://gist.github.com/codahale/f9f3781f7b54985bee94
8
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
9
reference_url https://github.com/rack/rack/commit/0cd7e9aa397f8ebb3b8481d67dbac8b4863a7f07
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/commit/0cd7e9aa397f8ebb3b8481d67dbac8b4863a7f07
10
reference_url https://github.com/rack/rack/commit/9a81b961457805f6d1a5c275d053068440421e11
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/commit/9a81b961457805f6d1a5c275d053068440421e11
11
reference_url https://groups.google.com/d/msg/rack-devel/xKrHVWeNvDM/4ZGA576CnK4J
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/d/msg/rack-devel/xKrHVWeNvDM/4ZGA576CnK4J
12
reference_url https://groups.google.com/forum/#!msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ
13
reference_url https://groups.google.com/forum/#!msg/rack-devel/hz-liLb9fKE/8jvVWU6xYiYJ
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!msg/rack-devel/hz-liLb9fKE/8jvVWU6xYiYJ
14
reference_url https://groups.google.com/forum/#!msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ
15
reference_url https://groups.google.com/forum/#!msg/rack-devel/RnQxm6i13C4/xfakH81yWvgJ
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!msg/rack-devel/RnQxm6i13C4/xfakH81yWvgJ
16
reference_url http://www.debian.org/security/2013/dsa-2783
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2013/dsa-2783
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700226
reference_id 700226
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700226
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-0263
reference_id CVE-2013-0263
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-0263
19
reference_url https://github.com/advisories/GHSA-xc85-32mf-xpv8
reference_id GHSA-xc85-32mf-xpv8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xc85-32mf-xpv8
20
reference_url https://security.gentoo.org/glsa/201405-10
reference_id GLSA-201405-10
reference_type
scores
url https://security.gentoo.org/glsa/201405-10
21
reference_url https://access.redhat.com/errata/RHSA-2013:0686
reference_id RHSA-2013:0686
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0686
fixed_packages
0
url pkg:gem/rack@1.3.10
purl pkg:gem/rack@1.3.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3eyy-mgk4-xue4
3
vulnerability VCID-3srh-99bk-ruft
4
vulnerability VCID-5a6b-yemd-mqgb
5
vulnerability VCID-7m5s-fgj3-v3c5
6
vulnerability VCID-7t6e-rm2b-s7a1
7
vulnerability VCID-8fp2-gkct-2fcu
8
vulnerability VCID-9h1q-9jzw-1bdk
9
vulnerability VCID-abcn-y96c-dfe3
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-pyme-h5rf-bfhx
26
vulnerability VCID-q6h3-j4b9-4kfg
27
vulnerability VCID-rb6e-p5hw-kfa6
28
vulnerability VCID-rube-m1vm-d7hd
29
vulnerability VCID-s6ny-5vqq-uqg7
30
vulnerability VCID-t2vh-fkgc-tba9
31
vulnerability VCID-u393-uzrh-4bea
32
vulnerability VCID-unav-qy3e-2bd5
33
vulnerability VCID-venj-nk2m-pkd2
34
vulnerability VCID-vxsm-fcuq-y7e8
35
vulnerability VCID-w8dy-4cvu-ckcm
36
vulnerability VCID-wvjz-yynu-qbbf
37
vulnerability VCID-ym3c-dbhb-e3fs
38
vulnerability VCID-ytrg-5hh7-7qcq
39
vulnerability VCID-yybg-erer-jfaw
40
vulnerability VCID-zmuu-6s9z-cqd2
41
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.3.10
1
url pkg:gem/rack@1.4.5
purl pkg:gem/rack@1.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-hnvx-fk27-9keb
19
vulnerability VCID-mkxe-9gpy-ebdp
20
vulnerability VCID-mqhf-duvt-7yfk
21
vulnerability VCID-nd2m-v3wz-xfhw
22
vulnerability VCID-nejs-mnc1-syc5
23
vulnerability VCID-nesq-w996-akh4
24
vulnerability VCID-q6h3-j4b9-4kfg
25
vulnerability VCID-rb6e-p5hw-kfa6
26
vulnerability VCID-rube-m1vm-d7hd
27
vulnerability VCID-s6ny-5vqq-uqg7
28
vulnerability VCID-t2vh-fkgc-tba9
29
vulnerability VCID-unav-qy3e-2bd5
30
vulnerability VCID-venj-nk2m-pkd2
31
vulnerability VCID-vxsm-fcuq-y7e8
32
vulnerability VCID-w8dy-4cvu-ckcm
33
vulnerability VCID-wvjz-yynu-qbbf
34
vulnerability VCID-ym3c-dbhb-e3fs
35
vulnerability VCID-ytrg-5hh7-7qcq
36
vulnerability VCID-yybg-erer-jfaw
37
vulnerability VCID-zmuu-6s9z-cqd2
38
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.4.5
2
url pkg:gem/rack@1.5.0.beta.1
purl pkg:gem/rack@1.5.0.beta.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3kfb-z5dw-hkfv
3
vulnerability VCID-3srh-99bk-ruft
4
vulnerability VCID-5a6b-yemd-mqgb
5
vulnerability VCID-7m5s-fgj3-v3c5
6
vulnerability VCID-7t6e-rm2b-s7a1
7
vulnerability VCID-8fp2-gkct-2fcu
8
vulnerability VCID-9h1q-9jzw-1bdk
9
vulnerability VCID-abcn-y96c-dfe3
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-rube-m1vm-d7hd
28
vulnerability VCID-s6ny-5vqq-uqg7
29
vulnerability VCID-t2vh-fkgc-tba9
30
vulnerability VCID-u393-uzrh-4bea
31
vulnerability VCID-unav-qy3e-2bd5
32
vulnerability VCID-venj-nk2m-pkd2
33
vulnerability VCID-vxsm-fcuq-y7e8
34
vulnerability VCID-w8dy-4cvu-ckcm
35
vulnerability VCID-wvjz-yynu-qbbf
36
vulnerability VCID-ym3c-dbhb-e3fs
37
vulnerability VCID-yse4-vy3c-xfea
38
vulnerability VCID-ytrg-5hh7-7qcq
39
vulnerability VCID-yybg-erer-jfaw
40
vulnerability VCID-zmuu-6s9z-cqd2
41
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.5.0.beta.1
3
url pkg:gem/rack@1.5.2
purl pkg:gem/rack@1.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-rube-m1vm-d7hd
28
vulnerability VCID-s6ny-5vqq-uqg7
29
vulnerability VCID-t2vh-fkgc-tba9
30
vulnerability VCID-unav-qy3e-2bd5
31
vulnerability VCID-venj-nk2m-pkd2
32
vulnerability VCID-vxsm-fcuq-y7e8
33
vulnerability VCID-w8dy-4cvu-ckcm
34
vulnerability VCID-wvjz-yynu-qbbf
35
vulnerability VCID-ym3c-dbhb-e3fs
36
vulnerability VCID-ytrg-5hh7-7qcq
37
vulnerability VCID-yybg-erer-jfaw
38
vulnerability VCID-zmuu-6s9z-cqd2
39
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.5.2
aliases CVE-2013-0263, GHSA-xc85-32mf-xpv8, OSV-89939
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3kfb-z5dw-hkfv
4
url VCID-3srh-99bk-ruft
vulnerability_id VCID-3srh-99bk-ruft
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34826.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34826.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34826
reference_id
reference_type
scores
0
value 0.00021
scoring_system epss
scoring_elements 0.0625
published_at 2026-06-11T12:55:00Z
1
value 0.00021
scoring_system epss
scoring_elements 0.06272
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34826
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34826
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34826
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34826.yml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34826.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-34826
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-34826
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454508
reference_id 2454508
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454508
8
reference_url https://github.com/advisories/GHSA-x8cg-fq8g-mxfx
reference_id GHSA-x8cg-fq8g-mxfx
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x8cg-fq8g-mxfx
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-x8cg-fq8g-mxfx
reference_id GHSA-x8cg-fq8g-mxfx
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-02T18:42:34Z/
url https://github.com/rack/rack/security/advisories/GHSA-x8cg-fq8g-mxfx
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@2.2.23
purl pkg:gem/rack@2.2.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.23
1
url pkg:gem/rack@3.1.21
purl pkg:gem/rack@3.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.21
2
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-34826, GHSA-x8cg-fq8g-mxfx
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3srh-99bk-ruft
5
url VCID-5a6b-yemd-mqgb
vulnerability_id VCID-5a6b-yemd-mqgb
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25500.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25500.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-25500
reference_id
reference_type
scores
0
value 0.00025
scoring_system epss
scoring_elements 0.07476
published_at 2026-06-12T12:55:00Z
1
value 0.00025
scoring_system epss
scoring_elements 0.07443
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-25500
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25500
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25500
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128480
reference_id 1128480
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128480
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2440738
reference_id 2440738
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2440738
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-25500
reference_id CVE-2026-25500
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-25500
8
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-25500.yml
reference_id CVE-2026-25500.YML
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-25500.yml
9
reference_url https://github.com/rack/rack/commit/f2f225f297b99fbee3d9f51255d41f601fc40aff
reference_id f2f225f297b99fbee3d9f51255d41f601fc40aff
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-18T19:42:04Z/
url https://github.com/rack/rack/commit/f2f225f297b99fbee3d9f51255d41f601fc40aff
10
reference_url https://github.com/advisories/GHSA-whrj-4476-wvmp
reference_id GHSA-whrj-4476-wvmp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-whrj-4476-wvmp
11
reference_url https://github.com/rack/rack/security/advisories/GHSA-whrj-4476-wvmp
reference_id GHSA-whrj-4476-wvmp
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-18T19:42:04Z/
url https://github.com/rack/rack/security/advisories/GHSA-whrj-4476-wvmp
12
reference_url https://usn.ubuntu.com/8066-1/
reference_id USN-8066-1
reference_type
scores
url https://usn.ubuntu.com/8066-1/
fixed_packages
0
url pkg:gem/rack@2.2.22
purl pkg:gem/rack@2.2.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-rb6e-p5hw-kfa6
12
vulnerability VCID-t2vh-fkgc-tba9
13
vulnerability VCID-vxsm-fcuq-y7e8
14
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.22
1
url pkg:gem/rack@3.1.20
purl pkg:gem/rack@3.1.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-rb6e-p5hw-kfa6
12
vulnerability VCID-t2vh-fkgc-tba9
13
vulnerability VCID-vxsm-fcuq-y7e8
14
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.20
2
url pkg:gem/rack@3.2.5
purl pkg:gem/rack@3.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-rb6e-p5hw-kfa6
12
vulnerability VCID-t2vh-fkgc-tba9
13
vulnerability VCID-vxsm-fcuq-y7e8
14
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.5
aliases CVE-2026-25500, GHSA-whrj-4476-wvmp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5a6b-yemd-mqgb
6
url VCID-7m5s-fgj3-v3c5
vulnerability_id VCID-7m5s-fgj3-v3c5
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-26146.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-26146.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-26146
reference_id
reference_type
scores
0
value 0.00775
scoring_system epss
scoring_elements 0.74122
published_at 2026-06-12T12:55:00Z
1
value 0.00775
scoring_system epss
scoring_elements 0.7405
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-26146
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25126
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25126
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26141
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26146
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1064516
reference_id 1064516
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1064516
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2265595
reference_id 2265595
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2265595
9
reference_url https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716
reference_id 30b8e39a578b25d4bdcc082c1c52c6f164b59716
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-02-29T17:31:54Z/
url https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716
10
reference_url https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582
reference_id 6c5d90bdcec0949f7ba06db62fb740dab394b582
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-02-29T17:31:54Z/
url https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582
11
reference_url https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942
reference_id 84942
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-02-29T17:31:54Z/
url https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942
12
reference_url https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f
reference_id a227cd793778c7c3a827d32808058571569cda6f
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-02-29T17:31:54Z/
url https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-26146
reference_id CVE-2024-26146
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-26146
14
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml
reference_id CVE-2024-26146.yml
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-02-29T17:31:54Z/
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml
15
reference_url https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd
reference_id e4c117749ba24a66f8ec5a08eddf68deeb425ccd
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-02-29T17:31:54Z/
url https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd
16
reference_url https://github.com/advisories/GHSA-54rr-7fvw-6x8f
reference_id GHSA-54rr-7fvw-6x8f
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-54rr-7fvw-6x8f
17
reference_url https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f
reference_id GHSA-54rr-7fvw-6x8f
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-02-29T17:31:54Z/
url https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f
18
reference_url https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html
reference_id msg00022.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-02-29T17:31:54Z/
url https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html
19
reference_url https://security.netapp.com/advisory/ntap-20240510-0006/
reference_id ntap-20240510-0006
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-02-29T17:31:54Z/
url https://security.netapp.com/advisory/ntap-20240510-0006/
20
reference_url https://access.redhat.com/errata/RHSA-2024:10806
reference_id RHSA-2024:10806
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:10806
21
reference_url https://access.redhat.com/errata/RHSA-2024:1841
reference_id RHSA-2024:1841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1841
22
reference_url https://access.redhat.com/errata/RHSA-2024:1846
reference_id RHSA-2024:1846
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1846
23
reference_url https://access.redhat.com/errata/RHSA-2024:2007
reference_id RHSA-2024:2007
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2007
24
reference_url https://access.redhat.com/errata/RHSA-2024:2113
reference_id RHSA-2024:2113
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2113
25
reference_url https://access.redhat.com/errata/RHSA-2024:2581
reference_id RHSA-2024:2581
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2581
26
reference_url https://access.redhat.com/errata/RHSA-2024:2584
reference_id RHSA-2024:2584
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2584
27
reference_url https://access.redhat.com/errata/RHSA-2024:2953
reference_id RHSA-2024:2953
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2953
28
reference_url https://access.redhat.com/errata/RHSA-2024:3431
reference_id RHSA-2024:3431
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:3431
29
reference_url https://usn.ubuntu.com/6689-1/
reference_id USN-6689-1
reference_type
scores
url https://usn.ubuntu.com/6689-1/
30
reference_url https://usn.ubuntu.com/6837-1/
reference_id USN-6837-1
reference_type
scores
url https://usn.ubuntu.com/6837-1/
31
reference_url https://usn.ubuntu.com/6837-2/
reference_id USN-6837-2
reference_type
scores
url https://usn.ubuntu.com/6837-2/
32
reference_url https://usn.ubuntu.com/7036-1/
reference_id USN-7036-1
reference_type
scores
url https://usn.ubuntu.com/7036-1/
fixed_packages
0
url pkg:gem/rack@2.0.9.4
purl pkg:gem/rack@2.0.9.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-9h1q-9jzw-1bdk
6
vulnerability VCID-abcn-y96c-dfe3
7
vulnerability VCID-e9ps-payd-abeu
8
vulnerability VCID-eduz-d41z-ekfw
9
vulnerability VCID-fcfm-c4dz-v3es
10
vulnerability VCID-gjjy-a7wb-qqaa
11
vulnerability VCID-gsss-za6y-c7hk
12
vulnerability VCID-guej-7tq7-fbb7
13
vulnerability VCID-mkxe-9gpy-ebdp
14
vulnerability VCID-mqhf-duvt-7yfk
15
vulnerability VCID-nd2m-v3wz-xfhw
16
vulnerability VCID-nejs-mnc1-syc5
17
vulnerability VCID-nesq-w996-akh4
18
vulnerability VCID-q6h3-j4b9-4kfg
19
vulnerability VCID-rb6e-p5hw-kfa6
20
vulnerability VCID-s6ny-5vqq-uqg7
21
vulnerability VCID-t2vh-fkgc-tba9
22
vulnerability VCID-unav-qy3e-2bd5
23
vulnerability VCID-vxsm-fcuq-y7e8
24
vulnerability VCID-w8dy-4cvu-ckcm
25
vulnerability VCID-wvjz-yynu-qbbf
26
vulnerability VCID-ym3c-dbhb-e3fs
27
vulnerability VCID-yybg-erer-jfaw
28
vulnerability VCID-zmuu-6s9z-cqd2
29
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.0.9.4
1
url pkg:gem/rack@2.1.4.4
purl pkg:gem/rack@2.1.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-9h1q-9jzw-1bdk
6
vulnerability VCID-abcn-y96c-dfe3
7
vulnerability VCID-e9ps-payd-abeu
8
vulnerability VCID-eduz-d41z-ekfw
9
vulnerability VCID-fcfm-c4dz-v3es
10
vulnerability VCID-gjjy-a7wb-qqaa
11
vulnerability VCID-gsss-za6y-c7hk
12
vulnerability VCID-guej-7tq7-fbb7
13
vulnerability VCID-mkxe-9gpy-ebdp
14
vulnerability VCID-mqhf-duvt-7yfk
15
vulnerability VCID-nd2m-v3wz-xfhw
16
vulnerability VCID-nejs-mnc1-syc5
17
vulnerability VCID-nesq-w996-akh4
18
vulnerability VCID-q6h3-j4b9-4kfg
19
vulnerability VCID-rb6e-p5hw-kfa6
20
vulnerability VCID-s6ny-5vqq-uqg7
21
vulnerability VCID-t2vh-fkgc-tba9
22
vulnerability VCID-unav-qy3e-2bd5
23
vulnerability VCID-vxsm-fcuq-y7e8
24
vulnerability VCID-w8dy-4cvu-ckcm
25
vulnerability VCID-wvjz-yynu-qbbf
26
vulnerability VCID-ym3c-dbhb-e3fs
27
vulnerability VCID-yybg-erer-jfaw
28
vulnerability VCID-zmuu-6s9z-cqd2
29
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.1.4.4
2
url pkg:gem/rack@2.2.8.1
purl pkg:gem/rack@2.2.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-9h1q-9jzw-1bdk
6
vulnerability VCID-abcn-y96c-dfe3
7
vulnerability VCID-e9ps-payd-abeu
8
vulnerability VCID-eduz-d41z-ekfw
9
vulnerability VCID-fcfm-c4dz-v3es
10
vulnerability VCID-gjjy-a7wb-qqaa
11
vulnerability VCID-gsss-za6y-c7hk
12
vulnerability VCID-guej-7tq7-fbb7
13
vulnerability VCID-mkxe-9gpy-ebdp
14
vulnerability VCID-mqhf-duvt-7yfk
15
vulnerability VCID-nd2m-v3wz-xfhw
16
vulnerability VCID-nejs-mnc1-syc5
17
vulnerability VCID-nesq-w996-akh4
18
vulnerability VCID-q6h3-j4b9-4kfg
19
vulnerability VCID-rb6e-p5hw-kfa6
20
vulnerability VCID-s6ny-5vqq-uqg7
21
vulnerability VCID-t2vh-fkgc-tba9
22
vulnerability VCID-unav-qy3e-2bd5
23
vulnerability VCID-vxsm-fcuq-y7e8
24
vulnerability VCID-w8dy-4cvu-ckcm
25
vulnerability VCID-ym3c-dbhb-e3fs
26
vulnerability VCID-yybg-erer-jfaw
27
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.8.1
3
url pkg:gem/rack@3.0.9.1
purl pkg:gem/rack@3.0.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-9h1q-9jzw-1bdk
6
vulnerability VCID-abcn-y96c-dfe3
7
vulnerability VCID-e9ps-payd-abeu
8
vulnerability VCID-eduz-d41z-ekfw
9
vulnerability VCID-fcfm-c4dz-v3es
10
vulnerability VCID-gjjy-a7wb-qqaa
11
vulnerability VCID-gsss-za6y-c7hk
12
vulnerability VCID-guej-7tq7-fbb7
13
vulnerability VCID-mkxe-9gpy-ebdp
14
vulnerability VCID-mqhf-duvt-7yfk
15
vulnerability VCID-nd2m-v3wz-xfhw
16
vulnerability VCID-nesq-w996-akh4
17
vulnerability VCID-q6h3-j4b9-4kfg
18
vulnerability VCID-rb6e-p5hw-kfa6
19
vulnerability VCID-s6ny-5vqq-uqg7
20
vulnerability VCID-t2vh-fkgc-tba9
21
vulnerability VCID-vxsm-fcuq-y7e8
22
vulnerability VCID-w8dy-4cvu-ckcm
23
vulnerability VCID-ym3c-dbhb-e3fs
24
vulnerability VCID-yybg-erer-jfaw
25
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.9.1
aliases CVE-2024-26146, GHSA-54rr-7fvw-6x8f
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7m5s-fgj3-v3c5
7
url VCID-7t6e-rm2b-s7a1
vulnerability_id VCID-7t6e-rm2b-s7a1
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-49007.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-49007.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-49007
reference_id
reference_type
scores
0
value 0.00569
scoring_system epss
scoring_elements 0.69034
published_at 2026-06-11T12:55:00Z
1
value 0.00569
scoring_system epss
scoring_elements 0.69127
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-49007
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
4
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-49007.yml
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-49007.yml
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-49007
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-49007
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1107363
reference_id 1107363
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1107363
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2370346
reference_id 2370346
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2370346
8
reference_url https://github.com/rack/rack/commit/4795831a0a310c2d31102749e551b38faab6401f
reference_id 4795831a0a310c2d31102749e551b38faab6401f
reference_type
scores
0
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-05T13:20:37Z/
url https://github.com/rack/rack/commit/4795831a0a310c2d31102749e551b38faab6401f
9
reference_url https://github.com/rack/rack/commit/aed514df37e33907df3c971ed3ca9a0a20ac2901
reference_id aed514df37e33907df3c971ed3ca9a0a20ac2901
reference_type
scores
0
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-05T13:20:37Z/
url https://github.com/rack/rack/commit/aed514df37e33907df3c971ed3ca9a0a20ac2901
10
reference_url https://github.com/advisories/GHSA-47m2-26rw-j2jw
reference_id GHSA-47m2-26rw-j2jw
reference_type
scores
url https://github.com/advisories/GHSA-47m2-26rw-j2jw
11
reference_url https://github.com/rack/rack/security/advisories/GHSA-47m2-26rw-j2jw
reference_id GHSA-47m2-26rw-j2jw
reference_type
scores
0
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-06-05T13:20:37Z/
url https://github.com/rack/rack/security/advisories/GHSA-47m2-26rw-j2jw
fixed_packages
0
url pkg:gem/rack@3.1.16
purl pkg:gem/rack@3.1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-eduz-d41z-ekfw
7
vulnerability VCID-fcfm-c4dz-v3es
8
vulnerability VCID-gjjy-a7wb-qqaa
9
vulnerability VCID-gsss-za6y-c7hk
10
vulnerability VCID-guej-7tq7-fbb7
11
vulnerability VCID-mqhf-duvt-7yfk
12
vulnerability VCID-nd2m-v3wz-xfhw
13
vulnerability VCID-nesq-w996-akh4
14
vulnerability VCID-q6h3-j4b9-4kfg
15
vulnerability VCID-rb6e-p5hw-kfa6
16
vulnerability VCID-s6ny-5vqq-uqg7
17
vulnerability VCID-t2vh-fkgc-tba9
18
vulnerability VCID-vxsm-fcuq-y7e8
19
vulnerability VCID-yybg-erer-jfaw
20
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.16
aliases CVE-2025-49007, GHSA-47m2-26rw-j2jw
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7t6e-rm2b-s7a1
8
url VCID-8fp2-gkct-2fcu
vulnerability_id VCID-8fp2-gkct-2fcu
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-44571.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-44571.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-44571
reference_id
reference_type
scores
0
value 0.03121
scoring_system epss
scoring_elements 0.87135
published_at 2026-06-11T12:55:00Z
1
value 0.03121
scoring_system epss
scoring_elements 0.87181
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-44571
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30122
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30123
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30123
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44570
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44570
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44571
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44571
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44572
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44572
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27530
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27530
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27539
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27539
9
reference_url https://discuss.rubyonrails.org/t/cve-2022-44571-possible-denial-of-service-vulnerability-in-rack-content-disposition-parsing/82126
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://discuss.rubyonrails.org/t/cve-2022-44571-possible-denial-of-service-vulnerability-in-rack-content-disposition-parsing/82126
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
12
reference_url https://github.com/rack/rack/releases/tag/v3.0.4.1
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/releases/tag/v3.0.4.1
13
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2022-44571.yml
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2022-44571.yml
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-44571
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-44571
15
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1029832
reference_id 1029832
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1029832
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2164714
reference_id 2164714
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2164714
17
reference_url https://github.com/advisories/GHSA-93pm-5p5f-3ghx
reference_id GHSA-93pm-5p5f-3ghx
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-93pm-5p5f-3ghx
18
reference_url https://access.redhat.com/errata/RHSA-2023:6818
reference_id RHSA-2023:6818
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6818
19
reference_url https://usn.ubuntu.com/5910-1/
reference_id USN-5910-1
reference_type
scores
url https://usn.ubuntu.com/5910-1/
20
reference_url https://usn.ubuntu.com/7036-1/
reference_id USN-7036-1
reference_type
scores
url https://usn.ubuntu.com/7036-1/
fixed_packages
0
url pkg:gem/rack@2.0.9.2
purl pkg:gem/rack@2.0.9.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nejs-mnc1-syc5
22
vulnerability VCID-nesq-w996-akh4
23
vulnerability VCID-q6h3-j4b9-4kfg
24
vulnerability VCID-rb6e-p5hw-kfa6
25
vulnerability VCID-s6ny-5vqq-uqg7
26
vulnerability VCID-t2vh-fkgc-tba9
27
vulnerability VCID-unav-qy3e-2bd5
28
vulnerability VCID-vxsm-fcuq-y7e8
29
vulnerability VCID-w8dy-4cvu-ckcm
30
vulnerability VCID-wvjz-yynu-qbbf
31
vulnerability VCID-ym3c-dbhb-e3fs
32
vulnerability VCID-yybg-erer-jfaw
33
vulnerability VCID-zmuu-6s9z-cqd2
34
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.0.9.2
1
url pkg:gem/rack@2.1.4.2
purl pkg:gem/rack@2.1.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nejs-mnc1-syc5
22
vulnerability VCID-nesq-w996-akh4
23
vulnerability VCID-q6h3-j4b9-4kfg
24
vulnerability VCID-rb6e-p5hw-kfa6
25
vulnerability VCID-s6ny-5vqq-uqg7
26
vulnerability VCID-t2vh-fkgc-tba9
27
vulnerability VCID-unav-qy3e-2bd5
28
vulnerability VCID-vxsm-fcuq-y7e8
29
vulnerability VCID-w8dy-4cvu-ckcm
30
vulnerability VCID-wvjz-yynu-qbbf
31
vulnerability VCID-ym3c-dbhb-e3fs
32
vulnerability VCID-yybg-erer-jfaw
33
vulnerability VCID-zmuu-6s9z-cqd2
34
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.1.4.2
2
url pkg:gem/rack@2.2.6.1
purl pkg:gem/rack@2.2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-mkxe-9gpy-ebdp
20
vulnerability VCID-mqhf-duvt-7yfk
21
vulnerability VCID-nd2m-v3wz-xfhw
22
vulnerability VCID-nejs-mnc1-syc5
23
vulnerability VCID-nesq-w996-akh4
24
vulnerability VCID-q6h3-j4b9-4kfg
25
vulnerability VCID-rb6e-p5hw-kfa6
26
vulnerability VCID-s6ny-5vqq-uqg7
27
vulnerability VCID-t2vh-fkgc-tba9
28
vulnerability VCID-unav-qy3e-2bd5
29
vulnerability VCID-vxsm-fcuq-y7e8
30
vulnerability VCID-w8dy-4cvu-ckcm
31
vulnerability VCID-wvjz-yynu-qbbf
32
vulnerability VCID-ym3c-dbhb-e3fs
33
vulnerability VCID-yybg-erer-jfaw
34
vulnerability VCID-zmuu-6s9z-cqd2
35
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.6.1
3
url pkg:gem/rack@3.0.4.1
purl pkg:gem/rack@3.0.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-9h1q-9jzw-1bdk
7
vulnerability VCID-abcn-y96c-dfe3
8
vulnerability VCID-dzcy-yd29-x3fm
9
vulnerability VCID-e9ps-payd-abeu
10
vulnerability VCID-eduz-d41z-ekfw
11
vulnerability VCID-etn1-jujr-dkfu
12
vulnerability VCID-fcfm-c4dz-v3es
13
vulnerability VCID-gjjy-a7wb-qqaa
14
vulnerability VCID-gsss-za6y-c7hk
15
vulnerability VCID-guej-7tq7-fbb7
16
vulnerability VCID-mkxe-9gpy-ebdp
17
vulnerability VCID-mqhf-duvt-7yfk
18
vulnerability VCID-nd2m-v3wz-xfhw
19
vulnerability VCID-nesq-w996-akh4
20
vulnerability VCID-q6h3-j4b9-4kfg
21
vulnerability VCID-rb6e-p5hw-kfa6
22
vulnerability VCID-s6ny-5vqq-uqg7
23
vulnerability VCID-t2vh-fkgc-tba9
24
vulnerability VCID-vxsm-fcuq-y7e8
25
vulnerability VCID-w8dy-4cvu-ckcm
26
vulnerability VCID-wvjz-yynu-qbbf
27
vulnerability VCID-ym3c-dbhb-e3fs
28
vulnerability VCID-yybg-erer-jfaw
29
vulnerability VCID-zmuu-6s9z-cqd2
30
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.4.1
aliases CVE-2022-44571, GHSA-93pm-5p5f-3ghx, GMS-2023-65
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8fp2-gkct-2fcu
9
url VCID-9h1q-9jzw-1bdk
vulnerability_id VCID-9h1q-9jzw-1bdk
summary
references
0
reference_url https://advisory.dw1.io/61
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://advisory.dw1.io/61
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39316
reference_id
reference_type
scores
0
value 0.00833
scoring_system epss
scoring_elements 0.7504
published_at 2026-06-11T12:55:00Z
1
value 0.00833
scoring_system epss
scoring_elements 0.75111
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39316
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
4
reference_url https://github.com/rack/rack/commit/412c980450ca729ee37f90a2661f166a9665e058
reference_id 412c980450ca729ee37f90a2661f166a9665e058
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-03T13:50:23Z/
url https://github.com/rack/rack/commit/412c980450ca729ee37f90a2661f166a9665e058
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39316
reference_id CVE-2024-39316
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39316
6
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-39316.yml
reference_id CVE-2024-39316.YML
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-39316.yml
7
reference_url https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f
reference_id GHSA-54rr-7fvw-6x8f
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-03T13:50:23Z/
url https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f
8
reference_url https://github.com/advisories/GHSA-cj83-2ww7-mvq7
reference_id GHSA-cj83-2ww7-mvq7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cj83-2ww7-mvq7
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-cj83-2ww7-mvq7
reference_id GHSA-cj83-2ww7-mvq7
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-03T13:50:23Z/
url https://github.com/rack/rack/security/advisories/GHSA-cj83-2ww7-mvq7
fixed_packages
0
url pkg:gem/rack@3.1.5
purl pkg:gem/rack@3.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-9h1q-9jzw-1bdk
6
vulnerability VCID-abcn-y96c-dfe3
7
vulnerability VCID-e9ps-payd-abeu
8
vulnerability VCID-eduz-d41z-ekfw
9
vulnerability VCID-fcfm-c4dz-v3es
10
vulnerability VCID-gjjy-a7wb-qqaa
11
vulnerability VCID-gsss-za6y-c7hk
12
vulnerability VCID-guej-7tq7-fbb7
13
vulnerability VCID-mkxe-9gpy-ebdp
14
vulnerability VCID-mqhf-duvt-7yfk
15
vulnerability VCID-nd2m-v3wz-xfhw
16
vulnerability VCID-nesq-w996-akh4
17
vulnerability VCID-q6h3-j4b9-4kfg
18
vulnerability VCID-rb6e-p5hw-kfa6
19
vulnerability VCID-s6ny-5vqq-uqg7
20
vulnerability VCID-t2vh-fkgc-tba9
21
vulnerability VCID-vxsm-fcuq-y7e8
22
vulnerability VCID-w8dy-4cvu-ckcm
23
vulnerability VCID-ym3c-dbhb-e3fs
24
vulnerability VCID-yybg-erer-jfaw
25
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.5
aliases CVE-2024-39316, GHSA-cj83-2ww7-mvq7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9h1q-9jzw-1bdk
10
url VCID-abcn-y96c-dfe3
vulnerability_id VCID-abcn-y96c-dfe3
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32762.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32762.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-32762
reference_id
reference_type
scores
0
value 0.0005
scoring_system epss
scoring_elements 0.16128
published_at 2026-06-11T12:55:00Z
1
value 0.0005
scoring_system epss
scoring_elements 0.1627
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-32762
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32762
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32762
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-32762.yml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-32762.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-32762
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-32762
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454489
reference_id 2454489
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454489
8
reference_url https://github.com/advisories/GHSA-qfgr-crr9-7r49
reference_id GHSA-qfgr-crr9-7r49
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qfgr-crr9-7r49
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-qfgr-crr9-7r49
reference_id GHSA-qfgr-crr9-7r49
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-02T17:42:32Z/
url https://github.com/rack/rack/security/advisories/GHSA-qfgr-crr9-7r49
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@3.1.21
purl pkg:gem/rack@3.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.21
1
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-32762, GHSA-qfgr-crr9-7r49
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-abcn-y96c-dfe3
11
url VCID-dfww-bthd-m3c5
vulnerability_id VCID-dfww-bthd-m3c5
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-44572.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-44572.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-44572
reference_id
reference_type
scores
0
value 0.00255
scoring_system epss
scoring_elements 0.49244
published_at 2026-06-12T12:55:00Z
1
value 0.00255
scoring_system epss
scoring_elements 0.49107
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-44572
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30122
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30123
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30123
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44570
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44570
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44571
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44571
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44572
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44572
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27530
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27530
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27539
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27539
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
11
reference_url https://github.com/rack/rack/releases/tag/v3.0.4.1
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/releases/tag/v3.0.4.1
12
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2022-44572.yml
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2022-44572.yml
13
reference_url https://hackerone.com/reports/1639882
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://hackerone.com/reports/1639882
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-44572
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-44572
15
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1029832
reference_id 1029832
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1029832
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2164722
reference_id 2164722
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2164722
17
reference_url https://github.com/advisories/GHSA-rqv2-275x-2jq5
reference_id GHSA-rqv2-275x-2jq5
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rqv2-275x-2jq5
18
reference_url https://access.redhat.com/errata/RHSA-2023:6818
reference_id RHSA-2023:6818
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6818
19
reference_url https://usn.ubuntu.com/5910-1/
reference_id USN-5910-1
reference_type
scores
url https://usn.ubuntu.com/5910-1/
20
reference_url https://usn.ubuntu.com/7036-1/
reference_id USN-7036-1
reference_type
scores
url https://usn.ubuntu.com/7036-1/
fixed_packages
0
url pkg:gem/rack@2.0.9.2
purl pkg:gem/rack@2.0.9.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nejs-mnc1-syc5
22
vulnerability VCID-nesq-w996-akh4
23
vulnerability VCID-q6h3-j4b9-4kfg
24
vulnerability VCID-rb6e-p5hw-kfa6
25
vulnerability VCID-s6ny-5vqq-uqg7
26
vulnerability VCID-t2vh-fkgc-tba9
27
vulnerability VCID-unav-qy3e-2bd5
28
vulnerability VCID-vxsm-fcuq-y7e8
29
vulnerability VCID-w8dy-4cvu-ckcm
30
vulnerability VCID-wvjz-yynu-qbbf
31
vulnerability VCID-ym3c-dbhb-e3fs
32
vulnerability VCID-yybg-erer-jfaw
33
vulnerability VCID-zmuu-6s9z-cqd2
34
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.0.9.2
1
url pkg:gem/rack@2.1.4.2
purl pkg:gem/rack@2.1.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nejs-mnc1-syc5
22
vulnerability VCID-nesq-w996-akh4
23
vulnerability VCID-q6h3-j4b9-4kfg
24
vulnerability VCID-rb6e-p5hw-kfa6
25
vulnerability VCID-s6ny-5vqq-uqg7
26
vulnerability VCID-t2vh-fkgc-tba9
27
vulnerability VCID-unav-qy3e-2bd5
28
vulnerability VCID-vxsm-fcuq-y7e8
29
vulnerability VCID-w8dy-4cvu-ckcm
30
vulnerability VCID-wvjz-yynu-qbbf
31
vulnerability VCID-ym3c-dbhb-e3fs
32
vulnerability VCID-yybg-erer-jfaw
33
vulnerability VCID-zmuu-6s9z-cqd2
34
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.1.4.2
2
url pkg:gem/rack@2.2.5
purl pkg:gem/rack@2.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-mkxe-9gpy-ebdp
20
vulnerability VCID-mqhf-duvt-7yfk
21
vulnerability VCID-nd2m-v3wz-xfhw
22
vulnerability VCID-nejs-mnc1-syc5
23
vulnerability VCID-nesq-w996-akh4
24
vulnerability VCID-q6h3-j4b9-4kfg
25
vulnerability VCID-rb6e-p5hw-kfa6
26
vulnerability VCID-s6ny-5vqq-uqg7
27
vulnerability VCID-t2vh-fkgc-tba9
28
vulnerability VCID-unav-qy3e-2bd5
29
vulnerability VCID-vxsm-fcuq-y7e8
30
vulnerability VCID-w8dy-4cvu-ckcm
31
vulnerability VCID-wvjz-yynu-qbbf
32
vulnerability VCID-ym3c-dbhb-e3fs
33
vulnerability VCID-yybg-erer-jfaw
34
vulnerability VCID-zmuu-6s9z-cqd2
35
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.5
3
url pkg:gem/rack@2.2.6.1
purl pkg:gem/rack@2.2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-mkxe-9gpy-ebdp
20
vulnerability VCID-mqhf-duvt-7yfk
21
vulnerability VCID-nd2m-v3wz-xfhw
22
vulnerability VCID-nejs-mnc1-syc5
23
vulnerability VCID-nesq-w996-akh4
24
vulnerability VCID-q6h3-j4b9-4kfg
25
vulnerability VCID-rb6e-p5hw-kfa6
26
vulnerability VCID-s6ny-5vqq-uqg7
27
vulnerability VCID-t2vh-fkgc-tba9
28
vulnerability VCID-unav-qy3e-2bd5
29
vulnerability VCID-vxsm-fcuq-y7e8
30
vulnerability VCID-w8dy-4cvu-ckcm
31
vulnerability VCID-wvjz-yynu-qbbf
32
vulnerability VCID-ym3c-dbhb-e3fs
33
vulnerability VCID-yybg-erer-jfaw
34
vulnerability VCID-zmuu-6s9z-cqd2
35
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.6.1
4
url pkg:gem/rack@3.0.4.1
purl pkg:gem/rack@3.0.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-9h1q-9jzw-1bdk
7
vulnerability VCID-abcn-y96c-dfe3
8
vulnerability VCID-dzcy-yd29-x3fm
9
vulnerability VCID-e9ps-payd-abeu
10
vulnerability VCID-eduz-d41z-ekfw
11
vulnerability VCID-etn1-jujr-dkfu
12
vulnerability VCID-fcfm-c4dz-v3es
13
vulnerability VCID-gjjy-a7wb-qqaa
14
vulnerability VCID-gsss-za6y-c7hk
15
vulnerability VCID-guej-7tq7-fbb7
16
vulnerability VCID-mkxe-9gpy-ebdp
17
vulnerability VCID-mqhf-duvt-7yfk
18
vulnerability VCID-nd2m-v3wz-xfhw
19
vulnerability VCID-nesq-w996-akh4
20
vulnerability VCID-q6h3-j4b9-4kfg
21
vulnerability VCID-rb6e-p5hw-kfa6
22
vulnerability VCID-s6ny-5vqq-uqg7
23
vulnerability VCID-t2vh-fkgc-tba9
24
vulnerability VCID-vxsm-fcuq-y7e8
25
vulnerability VCID-w8dy-4cvu-ckcm
26
vulnerability VCID-wvjz-yynu-qbbf
27
vulnerability VCID-ym3c-dbhb-e3fs
28
vulnerability VCID-yybg-erer-jfaw
29
vulnerability VCID-zmuu-6s9z-cqd2
30
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.4.1
aliases CVE-2022-44572, GHSA-rqv2-275x-2jq5, GMS-2023-66
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dfww-bthd-m3c5
12
url VCID-dzcy-yd29-x3fm
vulnerability_id VCID-dzcy-yd29-x3fm
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27539.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27539.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27539
reference_id
reference_type
scores
0
value 0.00364
scoring_system epss
scoring_elements 0.58869
published_at 2026-06-11T12:55:00Z
1
value 0.00364
scoring_system epss
scoring_elements 0.58981
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27539
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30122
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30123
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30123
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44570
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44570
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44571
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44571
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44572
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44572
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27530
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27530
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27539
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27539
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
11
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2023-27539.yml
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2023-27539.yml
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-27539
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-27539
13
reference_url https://security.netapp.com/advisory/ntap-20231208-0016
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20231208-0016
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033264
reference_id 1033264
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033264
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2179649
reference_id 2179649
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2179649
16
reference_url https://github.com/rack/rack/commit/231ef369ad0b542575fb36c74fcfcfabcf6c530c
reference_id 231ef369ad0b542575fb36c74fcfcfabcf6c530c
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T21:22:46Z/
url https://github.com/rack/rack/commit/231ef369ad0b542575fb36c74fcfcfabcf6c530c
17
reference_url https://discuss.rubyonrails.org/t/cve-2023-27539-possible-denial-of-service-vulnerability-in-racks-header-parsing/82466
reference_id 82466
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T21:22:46Z/
url https://discuss.rubyonrails.org/t/cve-2023-27539-possible-denial-of-service-vulnerability-in-racks-header-parsing/82466
18
reference_url https://www.debian.org/security/2023/dsa-5530
reference_id dsa-5530
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T21:22:46Z/
url https://www.debian.org/security/2023/dsa-5530
19
reference_url https://github.com/rack/rack/commit/ee7919ea04303717858be1c3f16b406adc6d8cff
reference_id ee7919ea04303717858be1c3f16b406adc6d8cff
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T21:22:46Z/
url https://github.com/rack/rack/commit/ee7919ea04303717858be1c3f16b406adc6d8cff
20
reference_url https://github.com/advisories/GHSA-c6qg-cjj8-47qp
reference_id GHSA-c6qg-cjj8-47qp
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T21:22:46Z/
url https://github.com/advisories/GHSA-c6qg-cjj8-47qp
21
reference_url https://lists.debian.org/debian-lts-announce/2023/04/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T21:22:46Z/
url https://lists.debian.org/debian-lts-announce/2023/04/msg00017.html
22
reference_url https://security.netapp.com/advisory/ntap-20231208-0016/
reference_id ntap-20231208-0016
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T21:22:46Z/
url https://security.netapp.com/advisory/ntap-20231208-0016/
23
reference_url https://access.redhat.com/errata/RHSA-2023:1953
reference_id RHSA-2023:1953
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1953
24
reference_url https://access.redhat.com/errata/RHSA-2023:1961
reference_id RHSA-2023:1961
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1961
25
reference_url https://access.redhat.com/errata/RHSA-2023:1981
reference_id RHSA-2023:1981
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1981
26
reference_url https://access.redhat.com/errata/RHSA-2023:2652
reference_id RHSA-2023:2652
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2652
27
reference_url https://access.redhat.com/errata/RHSA-2023:3082
reference_id RHSA-2023:3082
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3082
28
reference_url https://access.redhat.com/errata/RHSA-2023:3403
reference_id RHSA-2023:3403
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3403
29
reference_url https://access.redhat.com/errata/RHSA-2023:3495
reference_id RHSA-2023:3495
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3495
30
reference_url https://access.redhat.com/errata/RHSA-2023:6818
reference_id RHSA-2023:6818
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6818
31
reference_url https://usn.ubuntu.com/6689-1/
reference_id USN-6689-1
reference_type
scores
url https://usn.ubuntu.com/6689-1/
32
reference_url https://usn.ubuntu.com/6905-1/
reference_id USN-6905-1
reference_type
scores
url https://usn.ubuntu.com/6905-1/
33
reference_url https://usn.ubuntu.com/7036-1/
reference_id USN-7036-1
reference_type
scores
url https://usn.ubuntu.com/7036-1/
fixed_packages
0
url pkg:gem/rack@2.2.6.4
purl pkg:gem/rack@2.2.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-9h1q-9jzw-1bdk
7
vulnerability VCID-abcn-y96c-dfe3
8
vulnerability VCID-e9ps-payd-abeu
9
vulnerability VCID-eduz-d41z-ekfw
10
vulnerability VCID-fcfm-c4dz-v3es
11
vulnerability VCID-gjjy-a7wb-qqaa
12
vulnerability VCID-gsss-za6y-c7hk
13
vulnerability VCID-guej-7tq7-fbb7
14
vulnerability VCID-mkxe-9gpy-ebdp
15
vulnerability VCID-mqhf-duvt-7yfk
16
vulnerability VCID-nd2m-v3wz-xfhw
17
vulnerability VCID-nejs-mnc1-syc5
18
vulnerability VCID-nesq-w996-akh4
19
vulnerability VCID-q6h3-j4b9-4kfg
20
vulnerability VCID-rb6e-p5hw-kfa6
21
vulnerability VCID-s6ny-5vqq-uqg7
22
vulnerability VCID-t2vh-fkgc-tba9
23
vulnerability VCID-unav-qy3e-2bd5
24
vulnerability VCID-vxsm-fcuq-y7e8
25
vulnerability VCID-w8dy-4cvu-ckcm
26
vulnerability VCID-wvjz-yynu-qbbf
27
vulnerability VCID-ym3c-dbhb-e3fs
28
vulnerability VCID-yybg-erer-jfaw
29
vulnerability VCID-zmuu-6s9z-cqd2
30
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.6.4
1
url pkg:gem/rack@3.0.6.1
purl pkg:gem/rack@3.0.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-9h1q-9jzw-1bdk
7
vulnerability VCID-abcn-y96c-dfe3
8
vulnerability VCID-e9ps-payd-abeu
9
vulnerability VCID-eduz-d41z-ekfw
10
vulnerability VCID-fcfm-c4dz-v3es
11
vulnerability VCID-gjjy-a7wb-qqaa
12
vulnerability VCID-gsss-za6y-c7hk
13
vulnerability VCID-guej-7tq7-fbb7
14
vulnerability VCID-mkxe-9gpy-ebdp
15
vulnerability VCID-mqhf-duvt-7yfk
16
vulnerability VCID-nd2m-v3wz-xfhw
17
vulnerability VCID-nesq-w996-akh4
18
vulnerability VCID-q6h3-j4b9-4kfg
19
vulnerability VCID-rb6e-p5hw-kfa6
20
vulnerability VCID-s6ny-5vqq-uqg7
21
vulnerability VCID-t2vh-fkgc-tba9
22
vulnerability VCID-vxsm-fcuq-y7e8
23
vulnerability VCID-w8dy-4cvu-ckcm
24
vulnerability VCID-wvjz-yynu-qbbf
25
vulnerability VCID-ym3c-dbhb-e3fs
26
vulnerability VCID-yybg-erer-jfaw
27
vulnerability VCID-zmuu-6s9z-cqd2
28
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.6.1
aliases CVE-2023-27539, GHSA-c6qg-cjj8-47qp, GMS-2023-769
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dzcy-yd29-x3fm
13
url VCID-e9ps-payd-abeu
vulnerability_id VCID-e9ps-payd-abeu
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27610.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27610.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-27610
reference_id
reference_type
scores
0
value 0.01354
scoring_system epss
scoring_elements 0.80529
published_at 2026-06-11T12:55:00Z
1
value 0.01354
scoring_system epss
scoring_elements 0.8059
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-27610
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27610
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27610
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-27610.yml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-27610.yml
6
reference_url https://lists.debian.org/debian-lts-announce/2025/03/msg00016.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2025/03/msg00016.html
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-27610
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-27610
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1100444
reference_id 1100444
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1100444
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2351231
reference_id 2351231
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2351231
10
reference_url https://github.com/rack/rack/commit/50caab74fa01ee8f5dbdee7bb2782126d20c6583
reference_id 50caab74fa01ee8f5dbdee7bb2782126d20c6583
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-11T15:22:45Z/
url https://github.com/rack/rack/commit/50caab74fa01ee8f5dbdee7bb2782126d20c6583
11
reference_url https://github.com/advisories/GHSA-7wqh-767x-r66v
reference_id GHSA-7wqh-767x-r66v
reference_type
scores
url https://github.com/advisories/GHSA-7wqh-767x-r66v
12
reference_url https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v
reference_id GHSA-7wqh-767x-r66v
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-11T15:22:45Z/
url https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v
13
reference_url https://access.redhat.com/errata/RHSA-2025:3448
reference_id RHSA-2025:3448
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3448
14
reference_url https://access.redhat.com/errata/RHSA-2025:3490
reference_id RHSA-2025:3490
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3490
15
reference_url https://access.redhat.com/errata/RHSA-2025:3491
reference_id RHSA-2025:3491
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3491
16
reference_url https://access.redhat.com/errata/RHSA-2025:3492
reference_id RHSA-2025:3492
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3492
17
reference_url https://access.redhat.com/errata/RHSA-2025:3906
reference_id RHSA-2025:3906
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3906
18
reference_url https://access.redhat.com/errata/RHSA-2025:4576
reference_id RHSA-2025:4576
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:4576
19
reference_url https://usn.ubuntu.com/7366-1/
reference_id USN-7366-1
reference_type
scores
url https://usn.ubuntu.com/7366-1/
20
reference_url https://usn.ubuntu.com/7366-2/
reference_id USN-7366-2
reference_type
scores
url https://usn.ubuntu.com/7366-2/
fixed_packages
0
url pkg:gem/rack@2.2.13
purl pkg:gem/rack@2.2.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-eduz-d41z-ekfw
7
vulnerability VCID-fcfm-c4dz-v3es
8
vulnerability VCID-gjjy-a7wb-qqaa
9
vulnerability VCID-gsss-za6y-c7hk
10
vulnerability VCID-guej-7tq7-fbb7
11
vulnerability VCID-mqhf-duvt-7yfk
12
vulnerability VCID-nd2m-v3wz-xfhw
13
vulnerability VCID-nejs-mnc1-syc5
14
vulnerability VCID-nesq-w996-akh4
15
vulnerability VCID-q6h3-j4b9-4kfg
16
vulnerability VCID-rb6e-p5hw-kfa6
17
vulnerability VCID-s6ny-5vqq-uqg7
18
vulnerability VCID-t2vh-fkgc-tba9
19
vulnerability VCID-unav-qy3e-2bd5
20
vulnerability VCID-vxsm-fcuq-y7e8
21
vulnerability VCID-ym3c-dbhb-e3fs
22
vulnerability VCID-yybg-erer-jfaw
23
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.13
1
url pkg:gem/rack@3.0.0.beta1
purl pkg:gem/rack@3.0.0.beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nesq-w996-akh4
22
vulnerability VCID-q6h3-j4b9-4kfg
23
vulnerability VCID-rb6e-p5hw-kfa6
24
vulnerability VCID-s6ny-5vqq-uqg7
25
vulnerability VCID-t2vh-fkgc-tba9
26
vulnerability VCID-vxsm-fcuq-y7e8
27
vulnerability VCID-w8dy-4cvu-ckcm
28
vulnerability VCID-wvjz-yynu-qbbf
29
vulnerability VCID-ym3c-dbhb-e3fs
30
vulnerability VCID-yybg-erer-jfaw
31
vulnerability VCID-zmuu-6s9z-cqd2
32
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.0.beta1
2
url pkg:gem/rack@3.0.14
purl pkg:gem/rack@3.0.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-eduz-d41z-ekfw
7
vulnerability VCID-fcfm-c4dz-v3es
8
vulnerability VCID-gjjy-a7wb-qqaa
9
vulnerability VCID-gsss-za6y-c7hk
10
vulnerability VCID-guej-7tq7-fbb7
11
vulnerability VCID-mqhf-duvt-7yfk
12
vulnerability VCID-nd2m-v3wz-xfhw
13
vulnerability VCID-nesq-w996-akh4
14
vulnerability VCID-q6h3-j4b9-4kfg
15
vulnerability VCID-rb6e-p5hw-kfa6
16
vulnerability VCID-s6ny-5vqq-uqg7
17
vulnerability VCID-t2vh-fkgc-tba9
18
vulnerability VCID-vxsm-fcuq-y7e8
19
vulnerability VCID-ym3c-dbhb-e3fs
20
vulnerability VCID-yybg-erer-jfaw
21
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.14
3
url pkg:gem/rack@3.1.12
purl pkg:gem/rack@3.1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-eduz-d41z-ekfw
7
vulnerability VCID-fcfm-c4dz-v3es
8
vulnerability VCID-gjjy-a7wb-qqaa
9
vulnerability VCID-gsss-za6y-c7hk
10
vulnerability VCID-guej-7tq7-fbb7
11
vulnerability VCID-mqhf-duvt-7yfk
12
vulnerability VCID-nd2m-v3wz-xfhw
13
vulnerability VCID-nesq-w996-akh4
14
vulnerability VCID-q6h3-j4b9-4kfg
15
vulnerability VCID-rb6e-p5hw-kfa6
16
vulnerability VCID-s6ny-5vqq-uqg7
17
vulnerability VCID-t2vh-fkgc-tba9
18
vulnerability VCID-vxsm-fcuq-y7e8
19
vulnerability VCID-ym3c-dbhb-e3fs
20
vulnerability VCID-yybg-erer-jfaw
21
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.12
aliases CVE-2025-27610, GHSA-7wqh-767x-r66v
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e9ps-payd-abeu
14
url VCID-eduz-d41z-ekfw
vulnerability_id VCID-eduz-d41z-ekfw
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34829.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34829.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34829
reference_id
reference_type
scores
0
value 0.00068
scoring_system epss
scoring_elements 0.21111
published_at 2026-06-11T12:55:00Z
1
value 0.00068
scoring_system epss
scoring_elements 0.21292
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34829
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34829
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34829
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34829.yml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34829.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-34829
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-34829
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454488
reference_id 2454488
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454488
8
reference_url https://github.com/advisories/GHSA-8vqr-qjwx-82mw
reference_id GHSA-8vqr-qjwx-82mw
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8vqr-qjwx-82mw
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-8vqr-qjwx-82mw
reference_id GHSA-8vqr-qjwx-82mw
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-02T17:41:27Z/
url https://github.com/rack/rack/security/advisories/GHSA-8vqr-qjwx-82mw
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@2.2.23
purl pkg:gem/rack@2.2.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.23
1
url pkg:gem/rack@3.1.21
purl pkg:gem/rack@3.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.21
2
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-34829, GHSA-8vqr-qjwx-82mw
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eduz-d41z-ekfw
15
url VCID-ehxc-kp4k-2bc6
vulnerability_id VCID-ehxc-kp4k-2bc6
summary 
A hash collision vulnerability in Rack allows remote attackers to
    cause a Denial of Service condition.
references
0
reference_url http://osvdb.org/show/osvdb/78121
reference_id
reference_type
scores
url http://osvdb.org/show/osvdb/78121
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5036.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-5036.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-5036
reference_id
reference_type
scores
0
value 0.01278
scoring_system epss
scoring_elements 0.79979
published_at 2026-06-11T12:55:00Z
1
value 0.01278
scoring_system epss
scoring_elements 0.80042
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-5036
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5036
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5036
4
reference_url https://gist.github.com/52bbc6b9cc19ce330829
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://gist.github.com/52bbc6b9cc19ce330829
5
reference_url https://github.com/rack/rack/commit/09c5e53f11a491c25bef873ed146842f3cd03228
reference_id
reference_type
scores
url https://github.com/rack/rack/commit/09c5e53f11a491c25bef873ed146842f3cd03228
6
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2011-5036.yml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2011-5036.yml
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-5036
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2011-5036
8
reference_url https://web.archive.org/web/20120201040317/http://jruby.org/2011/12/27/jruby-1-6-5-1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20120201040317/http://jruby.org/2011/12/27/jruby-1-6-5-1
9
reference_url https://web.archive.org/web/20130213132312/http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20130213132312/http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html
10
reference_url http://www.debian.org/security/2013/dsa-2783
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2013/dsa-2783
11
reference_url http://www.kb.cert.org/vuls/id/903934
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.kb.cert.org/vuls/id/903934
12
reference_url http://www.nruns.com/_downloads/advisory28122011.pdf
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.nruns.com/_downloads/advisory28122011.pdf
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653963
reference_id 653963
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=653963
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=771149
reference_id 771149
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=771149
15
reference_url http://www.ocert.org/advisories/ocert-2011-003.html
reference_id CVE-2011-4885;OSVDB-78115
reference_type exploit
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ocert.org/advisories/ocert-2011-003.html
16
reference_url https://github.com/advisories/GHSA-v6j3-7jrw-hq2p
reference_id GHSA-v6j3-7jrw-hq2p
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v6j3-7jrw-hq2p
17
reference_url https://security.gentoo.org/glsa/201203-05
reference_id GLSA-201203-05
reference_type
scores
url https://security.gentoo.org/glsa/201203-05
fixed_packages
0
url pkg:gem/rack@1.3.6
purl pkg:gem/rack@1.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3eyy-mgk4-xue4
3
vulnerability VCID-3kfb-z5dw-hkfv
4
vulnerability VCID-3srh-99bk-ruft
5
vulnerability VCID-5a6b-yemd-mqgb
6
vulnerability VCID-7m5s-fgj3-v3c5
7
vulnerability VCID-7t6e-rm2b-s7a1
8
vulnerability VCID-8fp2-gkct-2fcu
9
vulnerability VCID-9h1q-9jzw-1bdk
10
vulnerability VCID-abcn-y96c-dfe3
11
vulnerability VCID-dfww-bthd-m3c5
12
vulnerability VCID-dzcy-yd29-x3fm
13
vulnerability VCID-e9ps-payd-abeu
14
vulnerability VCID-eduz-d41z-ekfw
15
vulnerability VCID-etn1-jujr-dkfu
16
vulnerability VCID-fcfm-c4dz-v3es
17
vulnerability VCID-gjjy-a7wb-qqaa
18
vulnerability VCID-gsss-za6y-c7hk
19
vulnerability VCID-guej-7tq7-fbb7
20
vulnerability VCID-hnvx-fk27-9keb
21
vulnerability VCID-mkxe-9gpy-ebdp
22
vulnerability VCID-mqhf-duvt-7yfk
23
vulnerability VCID-nd2m-v3wz-xfhw
24
vulnerability VCID-nejs-mnc1-syc5
25
vulnerability VCID-nesq-w996-akh4
26
vulnerability VCID-pyme-h5rf-bfhx
27
vulnerability VCID-q6h3-j4b9-4kfg
28
vulnerability VCID-rb6e-p5hw-kfa6
29
vulnerability VCID-rube-m1vm-d7hd
30
vulnerability VCID-s6ny-5vqq-uqg7
31
vulnerability VCID-t2vh-fkgc-tba9
32
vulnerability VCID-u393-uzrh-4bea
33
vulnerability VCID-unav-qy3e-2bd5
34
vulnerability VCID-venj-nk2m-pkd2
35
vulnerability VCID-vxsm-fcuq-y7e8
36
vulnerability VCID-w8dy-4cvu-ckcm
37
vulnerability VCID-wvjz-yynu-qbbf
38
vulnerability VCID-ym3c-dbhb-e3fs
39
vulnerability VCID-yse4-vy3c-xfea
40
vulnerability VCID-ytrg-5hh7-7qcq
41
vulnerability VCID-yybg-erer-jfaw
42
vulnerability VCID-zmuu-6s9z-cqd2
43
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.3.6
1
url pkg:gem/rack@1.4.0
purl pkg:gem/rack@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3eyy-mgk4-xue4
3
vulnerability VCID-3kfb-z5dw-hkfv
4
vulnerability VCID-3srh-99bk-ruft
5
vulnerability VCID-5a6b-yemd-mqgb
6
vulnerability VCID-7m5s-fgj3-v3c5
7
vulnerability VCID-7t6e-rm2b-s7a1
8
vulnerability VCID-8fp2-gkct-2fcu
9
vulnerability VCID-9h1q-9jzw-1bdk
10
vulnerability VCID-abcn-y96c-dfe3
11
vulnerability VCID-dfww-bthd-m3c5
12
vulnerability VCID-dzcy-yd29-x3fm
13
vulnerability VCID-e9ps-payd-abeu
14
vulnerability VCID-eduz-d41z-ekfw
15
vulnerability VCID-etn1-jujr-dkfu
16
vulnerability VCID-fcfm-c4dz-v3es
17
vulnerability VCID-gjjy-a7wb-qqaa
18
vulnerability VCID-gsss-za6y-c7hk
19
vulnerability VCID-guej-7tq7-fbb7
20
vulnerability VCID-hnvx-fk27-9keb
21
vulnerability VCID-mkxe-9gpy-ebdp
22
vulnerability VCID-mqhf-duvt-7yfk
23
vulnerability VCID-nd2m-v3wz-xfhw
24
vulnerability VCID-nejs-mnc1-syc5
25
vulnerability VCID-nesq-w996-akh4
26
vulnerability VCID-pyme-h5rf-bfhx
27
vulnerability VCID-q6h3-j4b9-4kfg
28
vulnerability VCID-rb6e-p5hw-kfa6
29
vulnerability VCID-rube-m1vm-d7hd
30
vulnerability VCID-s6ny-5vqq-uqg7
31
vulnerability VCID-t2vh-fkgc-tba9
32
vulnerability VCID-u393-uzrh-4bea
33
vulnerability VCID-unav-qy3e-2bd5
34
vulnerability VCID-venj-nk2m-pkd2
35
vulnerability VCID-vxsm-fcuq-y7e8
36
vulnerability VCID-w8dy-4cvu-ckcm
37
vulnerability VCID-wvjz-yynu-qbbf
38
vulnerability VCID-ym3c-dbhb-e3fs
39
vulnerability VCID-yse4-vy3c-xfea
40
vulnerability VCID-ytrg-5hh7-7qcq
41
vulnerability VCID-yybg-erer-jfaw
42
vulnerability VCID-zmuu-6s9z-cqd2
43
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.4.0
aliases CVE-2011-5036, GHSA-v6j3-7jrw-hq2p, OSV-78121
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ehxc-kp4k-2bc6
16
url VCID-etn1-jujr-dkfu
vulnerability_id VCID-etn1-jujr-dkfu
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27530.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27530.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-27530
reference_id
reference_type
scores
0
value 0.01982
scoring_system epss
scoring_elements 0.8401
published_at 2026-06-12T12:55:00Z
1
value 0.01982
scoring_system epss
scoring_elements 0.83953
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-27530
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30122
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30122
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30123
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30123
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44570
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44570
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44571
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44571
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44572
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44572
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27530
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27530
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27539
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27539
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
11
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2023-27530.yml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2023-27530.yml
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-27530
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-27530
13
reference_url https://security.netapp.com/advisory/ntap-20231208-0015
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20231208-0015
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032803
reference_id 1032803
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032803
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2176477
reference_id 2176477
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2176477
16
reference_url https://discuss.rubyonrails.org/t/cve-2023-27530-possible-dos-vulnerability-in-multipart-mime-parsing/82388
reference_id 82388
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:29:06Z/
url https://discuss.rubyonrails.org/t/cve-2023-27530-possible-dos-vulnerability-in-multipart-mime-parsing/82388
17
reference_url https://www.debian.org/security/2023/dsa-5530
reference_id dsa-5530
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:29:06Z/
url https://www.debian.org/security/2023/dsa-5530
18
reference_url https://github.com/advisories/GHSA-3h57-hmj3-gj3p
reference_id GHSA-3h57-hmj3-gj3p
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3h57-hmj3-gj3p
19
reference_url https://lists.debian.org/debian-lts-announce/2023/04/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:29:06Z/
url https://lists.debian.org/debian-lts-announce/2023/04/msg00017.html
20
reference_url https://security.netapp.com/advisory/ntap-20231208-0015/
reference_id ntap-20231208-0015
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:29:06Z/
url https://security.netapp.com/advisory/ntap-20231208-0015/
21
reference_url https://access.redhat.com/errata/RHSA-2023:1961
reference_id RHSA-2023:1961
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1961
22
reference_url https://access.redhat.com/errata/RHSA-2023:1981
reference_id RHSA-2023:1981
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1981
23
reference_url https://access.redhat.com/errata/RHSA-2023:2652
reference_id RHSA-2023:2652
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2652
24
reference_url https://access.redhat.com/errata/RHSA-2023:3082
reference_id RHSA-2023:3082
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3082
25
reference_url https://access.redhat.com/errata/RHSA-2023:3403
reference_id RHSA-2023:3403
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3403
26
reference_url https://access.redhat.com/errata/RHSA-2023:6818
reference_id RHSA-2023:6818
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6818
27
reference_url https://usn.ubuntu.com/6837-1/
reference_id USN-6837-1
reference_type
scores
url https://usn.ubuntu.com/6837-1/
28
reference_url https://usn.ubuntu.com/6905-1/
reference_id USN-6905-1
reference_type
scores
url https://usn.ubuntu.com/6905-1/
29
reference_url https://usn.ubuntu.com/7036-1/
reference_id USN-7036-1
reference_type
scores
url https://usn.ubuntu.com/7036-1/
fixed_packages
0
url pkg:gem/rack@2.0.9.3
purl pkg:gem/rack@2.0.9.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-9h1q-9jzw-1bdk
7
vulnerability VCID-abcn-y96c-dfe3
8
vulnerability VCID-dzcy-yd29-x3fm
9
vulnerability VCID-e9ps-payd-abeu
10
vulnerability VCID-eduz-d41z-ekfw
11
vulnerability VCID-etn1-jujr-dkfu
12
vulnerability VCID-fcfm-c4dz-v3es
13
vulnerability VCID-gjjy-a7wb-qqaa
14
vulnerability VCID-gsss-za6y-c7hk
15
vulnerability VCID-guej-7tq7-fbb7
16
vulnerability VCID-mkxe-9gpy-ebdp
17
vulnerability VCID-mqhf-duvt-7yfk
18
vulnerability VCID-nd2m-v3wz-xfhw
19
vulnerability VCID-nejs-mnc1-syc5
20
vulnerability VCID-nesq-w996-akh4
21
vulnerability VCID-q6h3-j4b9-4kfg
22
vulnerability VCID-rb6e-p5hw-kfa6
23
vulnerability VCID-s6ny-5vqq-uqg7
24
vulnerability VCID-t2vh-fkgc-tba9
25
vulnerability VCID-unav-qy3e-2bd5
26
vulnerability VCID-vxsm-fcuq-y7e8
27
vulnerability VCID-w8dy-4cvu-ckcm
28
vulnerability VCID-wvjz-yynu-qbbf
29
vulnerability VCID-ym3c-dbhb-e3fs
30
vulnerability VCID-yybg-erer-jfaw
31
vulnerability VCID-zmuu-6s9z-cqd2
32
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.0.9.3
1
url pkg:gem/rack@2.1.4.3
purl pkg:gem/rack@2.1.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-9h1q-9jzw-1bdk
7
vulnerability VCID-abcn-y96c-dfe3
8
vulnerability VCID-dzcy-yd29-x3fm
9
vulnerability VCID-e9ps-payd-abeu
10
vulnerability VCID-eduz-d41z-ekfw
11
vulnerability VCID-etn1-jujr-dkfu
12
vulnerability VCID-fcfm-c4dz-v3es
13
vulnerability VCID-gjjy-a7wb-qqaa
14
vulnerability VCID-gsss-za6y-c7hk
15
vulnerability VCID-guej-7tq7-fbb7
16
vulnerability VCID-mkxe-9gpy-ebdp
17
vulnerability VCID-mqhf-duvt-7yfk
18
vulnerability VCID-nd2m-v3wz-xfhw
19
vulnerability VCID-nejs-mnc1-syc5
20
vulnerability VCID-nesq-w996-akh4
21
vulnerability VCID-q6h3-j4b9-4kfg
22
vulnerability VCID-rb6e-p5hw-kfa6
23
vulnerability VCID-s6ny-5vqq-uqg7
24
vulnerability VCID-t2vh-fkgc-tba9
25
vulnerability VCID-unav-qy3e-2bd5
26
vulnerability VCID-vxsm-fcuq-y7e8
27
vulnerability VCID-w8dy-4cvu-ckcm
28
vulnerability VCID-wvjz-yynu-qbbf
29
vulnerability VCID-ym3c-dbhb-e3fs
30
vulnerability VCID-yybg-erer-jfaw
31
vulnerability VCID-zmuu-6s9z-cqd2
32
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.1.4.3
2
url pkg:gem/rack@2.2.6.3
purl pkg:gem/rack@2.2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-9h1q-9jzw-1bdk
7
vulnerability VCID-abcn-y96c-dfe3
8
vulnerability VCID-dzcy-yd29-x3fm
9
vulnerability VCID-e9ps-payd-abeu
10
vulnerability VCID-eduz-d41z-ekfw
11
vulnerability VCID-etn1-jujr-dkfu
12
vulnerability VCID-fcfm-c4dz-v3es
13
vulnerability VCID-gjjy-a7wb-qqaa
14
vulnerability VCID-gsss-za6y-c7hk
15
vulnerability VCID-guej-7tq7-fbb7
16
vulnerability VCID-mkxe-9gpy-ebdp
17
vulnerability VCID-mqhf-duvt-7yfk
18
vulnerability VCID-nd2m-v3wz-xfhw
19
vulnerability VCID-nejs-mnc1-syc5
20
vulnerability VCID-nesq-w996-akh4
21
vulnerability VCID-q6h3-j4b9-4kfg
22
vulnerability VCID-rb6e-p5hw-kfa6
23
vulnerability VCID-s6ny-5vqq-uqg7
24
vulnerability VCID-t2vh-fkgc-tba9
25
vulnerability VCID-unav-qy3e-2bd5
26
vulnerability VCID-vxsm-fcuq-y7e8
27
vulnerability VCID-w8dy-4cvu-ckcm
28
vulnerability VCID-wvjz-yynu-qbbf
29
vulnerability VCID-ym3c-dbhb-e3fs
30
vulnerability VCID-yybg-erer-jfaw
31
vulnerability VCID-zmuu-6s9z-cqd2
32
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.6.3
3
url pkg:gem/rack@3.0.4.2
purl pkg:gem/rack@3.0.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-9h1q-9jzw-1bdk
7
vulnerability VCID-abcn-y96c-dfe3
8
vulnerability VCID-dzcy-yd29-x3fm
9
vulnerability VCID-e9ps-payd-abeu
10
vulnerability VCID-eduz-d41z-ekfw
11
vulnerability VCID-fcfm-c4dz-v3es
12
vulnerability VCID-gjjy-a7wb-qqaa
13
vulnerability VCID-gsss-za6y-c7hk
14
vulnerability VCID-guej-7tq7-fbb7
15
vulnerability VCID-mkxe-9gpy-ebdp
16
vulnerability VCID-mqhf-duvt-7yfk
17
vulnerability VCID-nd2m-v3wz-xfhw
18
vulnerability VCID-nesq-w996-akh4
19
vulnerability VCID-q6h3-j4b9-4kfg
20
vulnerability VCID-rb6e-p5hw-kfa6
21
vulnerability VCID-s6ny-5vqq-uqg7
22
vulnerability VCID-t2vh-fkgc-tba9
23
vulnerability VCID-vxsm-fcuq-y7e8
24
vulnerability VCID-w8dy-4cvu-ckcm
25
vulnerability VCID-wvjz-yynu-qbbf
26
vulnerability VCID-ym3c-dbhb-e3fs
27
vulnerability VCID-yybg-erer-jfaw
28
vulnerability VCID-zmuu-6s9z-cqd2
29
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.4.2
aliases CVE-2023-27530, GHSA-3h57-hmj3-gj3p, GMS-2023-663
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-etn1-jujr-dkfu
17
url VCID-fcfm-c4dz-v3es
vulnerability_id VCID-fcfm-c4dz-v3es
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61771.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61771.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61771
reference_id
reference_type
scores
0
value 0.00107
scoring_system epss
scoring_elements 0.28523
published_at 2026-06-11T12:55:00Z
1
value 0.00118
scoring_system epss
scoring_elements 0.30426
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61771
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61771
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61771
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1117628
reference_id 1117628
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1117628
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2402175
reference_id 2402175
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2402175
7
reference_url https://github.com/rack/rack/commit/589127f4ac8b5cf11cf88fb0cd116ffed4d2181e
reference_id 589127f4ac8b5cf11cf88fb0cd116ffed4d2181e
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-07T17:51:58Z/
url https://github.com/rack/rack/commit/589127f4ac8b5cf11cf88fb0cd116ffed4d2181e
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-61771
reference_id CVE-2025-61771
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-61771
9
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-61771.yml
reference_id CVE-2025-61771.YML
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-61771.yml
10
reference_url https://github.com/rack/rack/commit/d869fed663b113b95a74ad53e1b5cae6ab31f29e
reference_id d869fed663b113b95a74ad53e1b5cae6ab31f29e
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-07T17:51:58Z/
url https://github.com/rack/rack/commit/d869fed663b113b95a74ad53e1b5cae6ab31f29e
11
reference_url https://github.com/rack/rack/commit/e08f78c656c9394d6737c022bde087e0f33336fd
reference_id e08f78c656c9394d6737c022bde087e0f33336fd
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-07T17:51:58Z/
url https://github.com/rack/rack/commit/e08f78c656c9394d6737c022bde087e0f33336fd
12
reference_url https://github.com/advisories/GHSA-w9pc-fmgc-vxvw
reference_id GHSA-w9pc-fmgc-vxvw
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w9pc-fmgc-vxvw
13
reference_url https://github.com/rack/rack/security/advisories/GHSA-w9pc-fmgc-vxvw
reference_id GHSA-w9pc-fmgc-vxvw
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-07T17:51:58Z/
url https://github.com/rack/rack/security/advisories/GHSA-w9pc-fmgc-vxvw
14
reference_url https://access.redhat.com/errata/RHSA-2025:19512
reference_id RHSA-2025:19512
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19512
15
reference_url https://access.redhat.com/errata/RHSA-2025:19513
reference_id RHSA-2025:19513
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19513
16
reference_url https://access.redhat.com/errata/RHSA-2025:19647
reference_id RHSA-2025:19647
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19647
17
reference_url https://access.redhat.com/errata/RHSA-2025:19719
reference_id RHSA-2025:19719
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19719
18
reference_url https://access.redhat.com/errata/RHSA-2025:19734
reference_id RHSA-2025:19734
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19734
19
reference_url https://access.redhat.com/errata/RHSA-2025:19800
reference_id RHSA-2025:19800
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19800
20
reference_url https://access.redhat.com/errata/RHSA-2025:19948
reference_id RHSA-2025:19948
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19948
21
reference_url https://access.redhat.com/errata/RHSA-2025:20962
reference_id RHSA-2025:20962
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:20962
22
reference_url https://access.redhat.com/errata/RHSA-2025:21036
reference_id RHSA-2025:21036
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:21036
23
reference_url https://access.redhat.com/errata/RHSA-2025:21696
reference_id RHSA-2025:21696
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:21696
24
reference_url https://usn.ubuntu.com/7960-1/
reference_id USN-7960-1
reference_type
scores
url https://usn.ubuntu.com/7960-1/
fixed_packages
0
url pkg:gem/rack@2.2.19
purl pkg:gem/rack@2.2.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-q6h3-j4b9-4kfg
12
vulnerability VCID-rb6e-p5hw-kfa6
13
vulnerability VCID-s6ny-5vqq-uqg7
14
vulnerability VCID-t2vh-fkgc-tba9
15
vulnerability VCID-vxsm-fcuq-y7e8
16
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.19
1
url pkg:gem/rack@3.0.0.beta1
purl pkg:gem/rack@3.0.0.beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nesq-w996-akh4
22
vulnerability VCID-q6h3-j4b9-4kfg
23
vulnerability VCID-rb6e-p5hw-kfa6
24
vulnerability VCID-s6ny-5vqq-uqg7
25
vulnerability VCID-t2vh-fkgc-tba9
26
vulnerability VCID-vxsm-fcuq-y7e8
27
vulnerability VCID-w8dy-4cvu-ckcm
28
vulnerability VCID-wvjz-yynu-qbbf
29
vulnerability VCID-ym3c-dbhb-e3fs
30
vulnerability VCID-yybg-erer-jfaw
31
vulnerability VCID-zmuu-6s9z-cqd2
32
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.0.beta1
2
url pkg:gem/rack@3.1.17
purl pkg:gem/rack@3.1.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-q6h3-j4b9-4kfg
12
vulnerability VCID-rb6e-p5hw-kfa6
13
vulnerability VCID-s6ny-5vqq-uqg7
14
vulnerability VCID-t2vh-fkgc-tba9
15
vulnerability VCID-vxsm-fcuq-y7e8
16
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.17
3
url pkg:gem/rack@3.2.2
purl pkg:gem/rack@3.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-q6h3-j4b9-4kfg
12
vulnerability VCID-rb6e-p5hw-kfa6
13
vulnerability VCID-s6ny-5vqq-uqg7
14
vulnerability VCID-t2vh-fkgc-tba9
15
vulnerability VCID-vxsm-fcuq-y7e8
16
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.2
aliases CVE-2025-61771, GHSA-w9pc-fmgc-vxvw
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fcfm-c4dz-v3es
18
url VCID-gjjy-a7wb-qqaa
vulnerability_id VCID-gjjy-a7wb-qqaa
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34786.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34786.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34786
reference_id
reference_type
scores
0
value 0.00045
scoring_system epss
scoring_elements 0.14466
published_at 2026-06-11T12:55:00Z
1
value 0.00045
scoring_system epss
scoring_elements 0.14584
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34786
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34786
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34786
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34786.yml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34786.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-34786
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-34786
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454507
reference_id 2454507
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454507
8
reference_url https://github.com/advisories/GHSA-q4qf-9j86-f5mh
reference_id GHSA-q4qf-9j86-f5mh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q4qf-9j86-f5mh
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-q4qf-9j86-f5mh
reference_id GHSA-q4qf-9j86-f5mh
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-03T17:37:20Z/
url https://github.com/rack/rack/security/advisories/GHSA-q4qf-9j86-f5mh
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@2.2.23
purl pkg:gem/rack@2.2.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.23
1
url pkg:gem/rack@3.1.21
purl pkg:gem/rack@3.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.21
2
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-34786, GHSA-q4qf-9j86-f5mh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gjjy-a7wb-qqaa
19
url VCID-gsss-za6y-c7hk
vulnerability_id VCID-gsss-za6y-c7hk
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34835.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34835.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34835
reference_id
reference_type
scores
0
value 0.00131
scoring_system epss
scoring_elements 0.32101
published_at 2026-06-11T12:55:00Z
1
value 0.00131
scoring_system epss
scoring_elements 0.32285
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34835
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34835
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34835
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34835.yml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34835.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-34835
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-34835
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454482
reference_id 2454482
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454482
8
reference_url https://github.com/advisories/GHSA-g2pf-xv49-m2h5
reference_id GHSA-g2pf-xv49-m2h5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g2pf-xv49-m2h5
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-g2pf-xv49-m2h5
reference_id GHSA-g2pf-xv49-m2h5
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-02T17:43:54Z/
url https://github.com/rack/rack/security/advisories/GHSA-g2pf-xv49-m2h5
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@3.1.21
purl pkg:gem/rack@3.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.21
1
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-34835, GHSA-g2pf-xv49-m2h5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gsss-za6y-c7hk
20
url VCID-guej-7tq7-fbb7
vulnerability_id VCID-guej-7tq7-fbb7
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-22860.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-22860.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-22860
reference_id
reference_type
scores
0
value 0.00123
scoring_system epss
scoring_elements 0.31257
published_at 2026-06-12T12:55:00Z
1
value 0.00123
scoring_system epss
scoring_elements 0.31062
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-22860
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22860
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22860
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128479
reference_id 1128479
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128479
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2440737
reference_id 2440737
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2440737
7
reference_url https://github.com/rack/rack/commit/75c5745c286637a8f049a33790c71237762069e7
reference_id 75c5745c286637a8f049a33790c71237762069e7
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-18T19:27:31Z/
url https://github.com/rack/rack/commit/75c5745c286637a8f049a33790c71237762069e7
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-22860
reference_id CVE-2026-22860
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-22860
9
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-22860.yml
reference_id CVE-2026-22860.YML
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-22860.yml
10
reference_url https://github.com/advisories/GHSA-mxw3-3hh2-x2mh
reference_id GHSA-mxw3-3hh2-x2mh
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mxw3-3hh2-x2mh
11
reference_url https://github.com/rack/rack/security/advisories/GHSA-mxw3-3hh2-x2mh
reference_id GHSA-mxw3-3hh2-x2mh
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-18T19:27:31Z/
url https://github.com/rack/rack/security/advisories/GHSA-mxw3-3hh2-x2mh
12
reference_url https://usn.ubuntu.com/8066-1/
reference_id USN-8066-1
reference_type
scores
url https://usn.ubuntu.com/8066-1/
fixed_packages
0
url pkg:gem/rack@2.2.22
purl pkg:gem/rack@2.2.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-rb6e-p5hw-kfa6
12
vulnerability VCID-t2vh-fkgc-tba9
13
vulnerability VCID-vxsm-fcuq-y7e8
14
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.22
1
url pkg:gem/rack@3.1.20
purl pkg:gem/rack@3.1.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-rb6e-p5hw-kfa6
12
vulnerability VCID-t2vh-fkgc-tba9
13
vulnerability VCID-vxsm-fcuq-y7e8
14
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.20
2
url pkg:gem/rack@3.2.5
purl pkg:gem/rack@3.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-rb6e-p5hw-kfa6
12
vulnerability VCID-t2vh-fkgc-tba9
13
vulnerability VCID-vxsm-fcuq-y7e8
14
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.5
aliases CVE-2026-22860, GHSA-mxw3-3hh2-x2mh
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-guej-7tq7-fbb7
21
url VCID-hnvx-fk27-9keb
vulnerability_id VCID-hnvx-fk27-9keb
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8184.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8184.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8184
reference_id
reference_type
scores
0
value 0.00811
scoring_system epss
scoring_elements 0.74743
published_at 2026-06-12T12:55:00Z
1
value 0.00811
scoring_system epss
scoring_elements 0.74672
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8184
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8184
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8184
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rack/rack/commit/1f5763de6a9fe515ff84992b343d63c88104654c
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/commit/1f5763de6a9fe515ff84992b343d63c88104654c
6
reference_url https://groups.google.com/g/rubyonrails-security/c/OWtmozPH9Ak
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://groups.google.com/g/rubyonrails-security/c/OWtmozPH9Ak
7
reference_url https://hackerone.com/reports/895727
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://hackerone.com/reports/895727
8
reference_url https://lists.debian.org/debian-lts-announce/2020/07/msg00006.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/07/msg00006.html
9
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00038.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2023/01/msg00038.html
10
reference_url https://usn.ubuntu.com/4561-1
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4561-1
11
reference_url https://usn.ubuntu.com/4561-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4561-1/
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1849141
reference_id 1849141
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1849141
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=963477
reference_id 963477
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=963477
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-8184
reference_id CVE-2020-8184
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-8184
15
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2020-8184.yml
reference_id CVE-2020-8184.YML
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2020-8184.yml
16
reference_url https://github.com/advisories/GHSA-j6w9-fv6q-3q52
reference_id GHSA-j6w9-fv6q-3q52
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j6w9-fv6q-3q52
17
reference_url https://access.redhat.com/errata/RHSA-2020:4366
reference_id RHSA-2020:4366
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4366
18
reference_url https://usn.ubuntu.com/4561-2/
reference_id USN-4561-2
reference_type
scores
url https://usn.ubuntu.com/4561-2/
19
reference_url https://usn.ubuntu.com/USN-5253-1/
reference_id USN-USN-5253-1
reference_type
scores
url https://usn.ubuntu.com/USN-5253-1/
fixed_packages
0
url pkg:gem/rack@2.1.4
purl pkg:gem/rack@2.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-mkxe-9gpy-ebdp
20
vulnerability VCID-mqhf-duvt-7yfk
21
vulnerability VCID-nd2m-v3wz-xfhw
22
vulnerability VCID-nejs-mnc1-syc5
23
vulnerability VCID-nesq-w996-akh4
24
vulnerability VCID-q6h3-j4b9-4kfg
25
vulnerability VCID-rb6e-p5hw-kfa6
26
vulnerability VCID-s6ny-5vqq-uqg7
27
vulnerability VCID-t2vh-fkgc-tba9
28
vulnerability VCID-unav-qy3e-2bd5
29
vulnerability VCID-vxsm-fcuq-y7e8
30
vulnerability VCID-w8dy-4cvu-ckcm
31
vulnerability VCID-wvjz-yynu-qbbf
32
vulnerability VCID-ym3c-dbhb-e3fs
33
vulnerability VCID-ytrg-5hh7-7qcq
34
vulnerability VCID-yybg-erer-jfaw
35
vulnerability VCID-zmuu-6s9z-cqd2
36
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.1.4
1
url pkg:gem/rack@2.2.3
purl pkg:gem/rack@2.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-mkxe-9gpy-ebdp
20
vulnerability VCID-mqhf-duvt-7yfk
21
vulnerability VCID-nd2m-v3wz-xfhw
22
vulnerability VCID-nejs-mnc1-syc5
23
vulnerability VCID-nesq-w996-akh4
24
vulnerability VCID-q6h3-j4b9-4kfg
25
vulnerability VCID-rb6e-p5hw-kfa6
26
vulnerability VCID-s6ny-5vqq-uqg7
27
vulnerability VCID-t2vh-fkgc-tba9
28
vulnerability VCID-unav-qy3e-2bd5
29
vulnerability VCID-vxsm-fcuq-y7e8
30
vulnerability VCID-w8dy-4cvu-ckcm
31
vulnerability VCID-wvjz-yynu-qbbf
32
vulnerability VCID-ym3c-dbhb-e3fs
33
vulnerability VCID-yybg-erer-jfaw
34
vulnerability VCID-zmuu-6s9z-cqd2
35
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.3
aliases CVE-2020-8184, GHSA-j6w9-fv6q-3q52
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hnvx-fk27-9keb
22
url VCID-mkxe-9gpy-ebdp
vulnerability_id VCID-mkxe-9gpy-ebdp
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-25184.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-25184.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-25184
reference_id
reference_type
scores
0
value 0.01406
scoring_system epss
scoring_elements 0.80882
published_at 2026-06-11T12:55:00Z
1
value 0.01406
scoring_system epss
scoring_elements 0.80942
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-25184
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-25184
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-25184
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-25184.yml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-25184.yml
6
reference_url https://lists.debian.org/debian-lts-announce/2025/03/msg00016.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2025/03/msg00016.html
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-25184
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-25184
8
reference_url https://github.com/rack/rack/commit/074ae244430cda05c27ca91cda699709cfb3ad8e
reference_id 074ae244430cda05c27ca91cda699709cfb3ad8e
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-12T19:09:07Z/
url https://github.com/rack/rack/commit/074ae244430cda05c27ca91cda699709cfb3ad8e
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098257
reference_id 1098257
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098257
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2345301
reference_id 2345301
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2345301
11
reference_url https://github.com/advisories/GHSA-7g2v-jj9q-g3rg
reference_id GHSA-7g2v-jj9q-g3rg
reference_type
scores
url https://github.com/advisories/GHSA-7g2v-jj9q-g3rg
12
reference_url https://github.com/rack/rack/security/advisories/GHSA-7g2v-jj9q-g3rg
reference_id GHSA-7g2v-jj9q-g3rg
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
2
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-12T19:09:07Z/
url https://github.com/rack/rack/security/advisories/GHSA-7g2v-jj9q-g3rg
13
reference_url https://access.redhat.com/errata/RHSA-2025:1985
reference_id RHSA-2025:1985
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:1985
14
reference_url https://access.redhat.com/errata/RHSA-2025:7085
reference_id RHSA-2025:7085
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:7085
15
reference_url https://usn.ubuntu.com/7366-1/
reference_id USN-7366-1
reference_type
scores
url https://usn.ubuntu.com/7366-1/
16
reference_url https://usn.ubuntu.com/7366-2/
reference_id USN-7366-2
reference_type
scores
url https://usn.ubuntu.com/7366-2/
fixed_packages
0
url pkg:gem/rack@2.2.11
purl pkg:gem/rack@2.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-e9ps-payd-abeu
7
vulnerability VCID-eduz-d41z-ekfw
8
vulnerability VCID-fcfm-c4dz-v3es
9
vulnerability VCID-gjjy-a7wb-qqaa
10
vulnerability VCID-gsss-za6y-c7hk
11
vulnerability VCID-guej-7tq7-fbb7
12
vulnerability VCID-mqhf-duvt-7yfk
13
vulnerability VCID-nd2m-v3wz-xfhw
14
vulnerability VCID-nejs-mnc1-syc5
15
vulnerability VCID-nesq-w996-akh4
16
vulnerability VCID-q6h3-j4b9-4kfg
17
vulnerability VCID-rb6e-p5hw-kfa6
18
vulnerability VCID-s6ny-5vqq-uqg7
19
vulnerability VCID-t2vh-fkgc-tba9
20
vulnerability VCID-unav-qy3e-2bd5
21
vulnerability VCID-vxsm-fcuq-y7e8
22
vulnerability VCID-w8dy-4cvu-ckcm
23
vulnerability VCID-ym3c-dbhb-e3fs
24
vulnerability VCID-yybg-erer-jfaw
25
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.11
1
url pkg:gem/rack@3.0.0.beta1
purl pkg:gem/rack@3.0.0.beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nesq-w996-akh4
22
vulnerability VCID-q6h3-j4b9-4kfg
23
vulnerability VCID-rb6e-p5hw-kfa6
24
vulnerability VCID-s6ny-5vqq-uqg7
25
vulnerability VCID-t2vh-fkgc-tba9
26
vulnerability VCID-vxsm-fcuq-y7e8
27
vulnerability VCID-w8dy-4cvu-ckcm
28
vulnerability VCID-wvjz-yynu-qbbf
29
vulnerability VCID-ym3c-dbhb-e3fs
30
vulnerability VCID-yybg-erer-jfaw
31
vulnerability VCID-zmuu-6s9z-cqd2
32
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.0.beta1
2
url pkg:gem/rack@3.0.12
purl pkg:gem/rack@3.0.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-e9ps-payd-abeu
7
vulnerability VCID-eduz-d41z-ekfw
8
vulnerability VCID-fcfm-c4dz-v3es
9
vulnerability VCID-gjjy-a7wb-qqaa
10
vulnerability VCID-gsss-za6y-c7hk
11
vulnerability VCID-guej-7tq7-fbb7
12
vulnerability VCID-mqhf-duvt-7yfk
13
vulnerability VCID-nd2m-v3wz-xfhw
14
vulnerability VCID-nesq-w996-akh4
15
vulnerability VCID-q6h3-j4b9-4kfg
16
vulnerability VCID-rb6e-p5hw-kfa6
17
vulnerability VCID-s6ny-5vqq-uqg7
18
vulnerability VCID-t2vh-fkgc-tba9
19
vulnerability VCID-vxsm-fcuq-y7e8
20
vulnerability VCID-w8dy-4cvu-ckcm
21
vulnerability VCID-ym3c-dbhb-e3fs
22
vulnerability VCID-yybg-erer-jfaw
23
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.12
3
url pkg:gem/rack@3.1.10
purl pkg:gem/rack@3.1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-e9ps-payd-abeu
7
vulnerability VCID-eduz-d41z-ekfw
8
vulnerability VCID-fcfm-c4dz-v3es
9
vulnerability VCID-gjjy-a7wb-qqaa
10
vulnerability VCID-gsss-za6y-c7hk
11
vulnerability VCID-guej-7tq7-fbb7
12
vulnerability VCID-mqhf-duvt-7yfk
13
vulnerability VCID-nd2m-v3wz-xfhw
14
vulnerability VCID-nesq-w996-akh4
15
vulnerability VCID-q6h3-j4b9-4kfg
16
vulnerability VCID-rb6e-p5hw-kfa6
17
vulnerability VCID-s6ny-5vqq-uqg7
18
vulnerability VCID-t2vh-fkgc-tba9
19
vulnerability VCID-vxsm-fcuq-y7e8
20
vulnerability VCID-w8dy-4cvu-ckcm
21
vulnerability VCID-ym3c-dbhb-e3fs
22
vulnerability VCID-yybg-erer-jfaw
23
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.10
aliases CVE-2025-25184, GHSA-7g2v-jj9q-g3rg
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mkxe-9gpy-ebdp
23
url VCID-mqhf-duvt-7yfk
vulnerability_id VCID-mqhf-duvt-7yfk
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34785.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34785.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34785
reference_id
reference_type
scores
0
value 0.00049
scoring_system epss
scoring_elements 0.15546
published_at 2026-06-11T12:55:00Z
1
value 0.00049
scoring_system epss
scoring_elements 0.15684
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34785
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34785
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34785
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34785.yml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34785.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-34785
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-34785
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454486
reference_id 2454486
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454486
8
reference_url https://github.com/advisories/GHSA-h2jq-g4cq-5ppq
reference_id GHSA-h2jq-g4cq-5ppq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h2jq-g4cq-5ppq
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-h2jq-g4cq-5ppq
reference_id GHSA-h2jq-g4cq-5ppq
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-02T18:58:57Z/
url https://github.com/rack/rack/security/advisories/GHSA-h2jq-g4cq-5ppq
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@2.2.23
purl pkg:gem/rack@2.2.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.23
1
url pkg:gem/rack@3.1.21
purl pkg:gem/rack@3.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.21
2
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-34785, GHSA-h2jq-g4cq-5ppq
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mqhf-duvt-7yfk
24
url VCID-nd2m-v3wz-xfhw
vulnerability_id VCID-nd2m-v3wz-xfhw
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34830.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34830.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34830
reference_id
reference_type
scores
0
value 0.00049
scoring_system epss
scoring_elements 0.15546
published_at 2026-06-11T12:55:00Z
1
value 0.00049
scoring_system epss
scoring_elements 0.15684
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34830
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34830
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34830
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34830.yml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34830.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-34830
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-34830
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454510
reference_id 2454510
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454510
8
reference_url https://github.com/advisories/GHSA-qv7j-4883-hwh7
reference_id GHSA-qv7j-4883-hwh7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qv7j-4883-hwh7
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-qv7j-4883-hwh7
reference_id GHSA-qv7j-4883-hwh7
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements
1
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-02T18:59:36Z/
url https://github.com/rack/rack/security/advisories/GHSA-qv7j-4883-hwh7
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@2.2.23
purl pkg:gem/rack@2.2.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.23
1
url pkg:gem/rack@3.1.21
purl pkg:gem/rack@3.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.21
2
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-34830, GHSA-qv7j-4883-hwh7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nd2m-v3wz-xfhw
25
url VCID-nejs-mnc1-syc5
vulnerability_id VCID-nejs-mnc1-syc5
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-59830.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-59830.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-59830
reference_id
reference_type
scores
0
value 0.00228
scoring_system epss
scoring_elements 0.45684
published_at 2026-06-11T12:55:00Z
1
value 0.00228
scoring_system epss
scoring_elements 0.45831
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-59830
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59830
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59830
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1116431
reference_id 1116431
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1116431
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2398167
reference_id 2398167
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2398167
7
reference_url https://github.com/rack/rack/commit/54e4ffdd5affebcb0c015cc6ae74635c0831ed71
reference_id 54e4ffdd5affebcb0c015cc6ae74635c0831ed71
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-25T16:14:17Z/
url https://github.com/rack/rack/commit/54e4ffdd5affebcb0c015cc6ae74635c0831ed71
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-59830
reference_id CVE-2025-59830
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-59830
9
reference_url https://github.com/advisories/GHSA-625h-95r8-8xpm
reference_id GHSA-625h-95r8-8xpm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-625h-95r8-8xpm
10
reference_url https://github.com/rack/rack/security/advisories/GHSA-625h-95r8-8xpm
reference_id GHSA-625h-95r8-8xpm
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-25T16:14:17Z/
url https://github.com/rack/rack/security/advisories/GHSA-625h-95r8-8xpm
11
reference_url https://access.redhat.com/errata/RHSA-2025:19512
reference_id RHSA-2025:19512
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19512
12
reference_url https://access.redhat.com/errata/RHSA-2025:19513
reference_id RHSA-2025:19513
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19513
13
reference_url https://access.redhat.com/errata/RHSA-2025:19647
reference_id RHSA-2025:19647
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19647
14
reference_url https://access.redhat.com/errata/RHSA-2025:19719
reference_id RHSA-2025:19719
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19719
15
reference_url https://access.redhat.com/errata/RHSA-2025:19733
reference_id RHSA-2025:19733
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19733
16
reference_url https://access.redhat.com/errata/RHSA-2025:19734
reference_id RHSA-2025:19734
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19734
17
reference_url https://access.redhat.com/errata/RHSA-2025:19736
reference_id RHSA-2025:19736
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19736
18
reference_url https://access.redhat.com/errata/RHSA-2025:19800
reference_id RHSA-2025:19800
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19800
19
reference_url https://access.redhat.com/errata/RHSA-2025:19832
reference_id RHSA-2025:19832
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19832
20
reference_url https://access.redhat.com/errata/RHSA-2025:19855
reference_id RHSA-2025:19855
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19855
21
reference_url https://access.redhat.com/errata/RHSA-2025:19856
reference_id RHSA-2025:19856
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19856
22
reference_url https://access.redhat.com/errata/RHSA-2025:19948
reference_id RHSA-2025:19948
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19948
23
reference_url https://access.redhat.com/errata/RHSA-2025:20962
reference_id RHSA-2025:20962
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:20962
24
reference_url https://access.redhat.com/errata/RHSA-2025:21036
reference_id RHSA-2025:21036
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:21036
25
reference_url https://usn.ubuntu.com/7784-1/
reference_id USN-7784-1
reference_type
scores
url https://usn.ubuntu.com/7784-1/
26
reference_url https://usn.ubuntu.com/7960-1/
reference_id USN-7960-1
reference_type
scores
url https://usn.ubuntu.com/7960-1/
fixed_packages
0
url pkg:gem/rack@2.2.18
purl pkg:gem/rack@2.2.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-abcn-y96c-dfe3
5
vulnerability VCID-eduz-d41z-ekfw
6
vulnerability VCID-fcfm-c4dz-v3es
7
vulnerability VCID-gjjy-a7wb-qqaa
8
vulnerability VCID-gsss-za6y-c7hk
9
vulnerability VCID-guej-7tq7-fbb7
10
vulnerability VCID-mqhf-duvt-7yfk
11
vulnerability VCID-nd2m-v3wz-xfhw
12
vulnerability VCID-nesq-w996-akh4
13
vulnerability VCID-q6h3-j4b9-4kfg
14
vulnerability VCID-rb6e-p5hw-kfa6
15
vulnerability VCID-s6ny-5vqq-uqg7
16
vulnerability VCID-t2vh-fkgc-tba9
17
vulnerability VCID-vxsm-fcuq-y7e8
18
vulnerability VCID-yybg-erer-jfaw
19
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.18
1
url pkg:gem/rack@3.0.0.beta1
purl pkg:gem/rack@3.0.0.beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nesq-w996-akh4
22
vulnerability VCID-q6h3-j4b9-4kfg
23
vulnerability VCID-rb6e-p5hw-kfa6
24
vulnerability VCID-s6ny-5vqq-uqg7
25
vulnerability VCID-t2vh-fkgc-tba9
26
vulnerability VCID-vxsm-fcuq-y7e8
27
vulnerability VCID-w8dy-4cvu-ckcm
28
vulnerability VCID-wvjz-yynu-qbbf
29
vulnerability VCID-ym3c-dbhb-e3fs
30
vulnerability VCID-yybg-erer-jfaw
31
vulnerability VCID-zmuu-6s9z-cqd2
32
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.0.beta1
aliases CVE-2025-59830, GHSA-625h-95r8-8xpm
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nejs-mnc1-syc5
26
url VCID-nesq-w996-akh4
vulnerability_id VCID-nesq-w996-akh4
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34763.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34763.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34763
reference_id
reference_type
scores
0
value 0.00043
scoring_system epss
scoring_elements 0.13705
published_at 2026-06-11T12:55:00Z
1
value 0.00043
scoring_system epss
scoring_elements 0.13822
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34763
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34763
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34763
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34763.yml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34763.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-34763
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-34763
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454498
reference_id 2454498
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454498
8
reference_url https://github.com/advisories/GHSA-7mqq-6cf9-v2qp
reference_id GHSA-7mqq-6cf9-v2qp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7mqq-6cf9-v2qp
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-7mqq-6cf9-v2qp
reference_id GHSA-7mqq-6cf9-v2qp
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-02T17:41:04Z/
url https://github.com/rack/rack/security/advisories/GHSA-7mqq-6cf9-v2qp
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@2.2.23
purl pkg:gem/rack@2.2.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.23
1
url pkg:gem/rack@3.1.21
purl pkg:gem/rack@3.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.21
2
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-34763, GHSA-7mqq-6cf9-v2qp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nesq-w996-akh4
27
url VCID-pyme-h5rf-bfhx
vulnerability_id VCID-pyme-h5rf-bfhx
summary 
Multiple vulnerabilities have been found in Rack, the worst of
    which allow execution of arbitrary code.
references
0
reference_url http://rack.github.com/
reference_id
reference_type
scores
url http://rack.github.com/
1
reference_url http://rhn.redhat.com/errata/RHSA-2013-0544.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2013-0544.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2013-0548.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2013-0548.html
3
reference_url https://access.redhat.com/errata/RHSA-2013:0544
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2013:0544
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6109.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6109.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-6109
reference_id
reference_type
scores
0
value 0.00828
scoring_system epss
scoring_elements 0.7495
published_at 2026-06-11T12:55:00Z
1
value 0.00828
scoring_system epss
scoring_elements 0.7502
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-6109
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=895277
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=895277
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6109
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6109
8
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
9
reference_url https://github.com/rack/rack/blob/master/README.rdoc
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/blob/master/README.rdoc
10
reference_url https://github.com/rack/rack/commit/c9f65df37a151821eb88ddd1dc404b83e52c52d5
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/commit/c9f65df37a151821eb88ddd1dc404b83e52c52d5
11
reference_url https://groups.google.com/forum/#%21msg/rack-devel/1w4_fWEgTdI/XAkSNHjtdTsJ
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#%21msg/rack-devel/1w4_fWEgTdI/XAkSNHjtdTsJ
12
reference_url https://groups.google.com/forum/#!msg/rack-devel/1w4_fWEgTdI/XAkSNHjtdTsJ
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!msg/rack-devel/1w4_fWEgTdI/XAkSNHjtdTsJ
13
reference_url https://rhn.redhat.com/errata/RHSA-2013-0544.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://rhn.redhat.com/errata/RHSA-2013-0544.html
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698440
reference_id 698440
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698440
15
reference_url https://access.redhat.com/security/cve/CVE-2012-6109
reference_id CVE-2012-6109
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/cve/CVE-2012-6109
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-6109
reference_id CVE-2012-6109
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-6109
17
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2012-6109.yml
reference_id CVE-2012-6109.YML
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2012-6109.yml
18
reference_url https://github.com/advisories/GHSA-h77x-m5q8-c29h
reference_id GHSA-h77x-m5q8-c29h
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h77x-m5q8-c29h
19
reference_url https://security.gentoo.org/glsa/201405-10
reference_id GLSA-201405-10
reference_type
scores
url https://security.gentoo.org/glsa/201405-10
fixed_packages
0
url pkg:gem/rack@1.3.7
purl pkg:gem/rack@1.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3eyy-mgk4-xue4
3
vulnerability VCID-3kfb-z5dw-hkfv
4
vulnerability VCID-3srh-99bk-ruft
5
vulnerability VCID-5a6b-yemd-mqgb
6
vulnerability VCID-7m5s-fgj3-v3c5
7
vulnerability VCID-7t6e-rm2b-s7a1
8
vulnerability VCID-8fp2-gkct-2fcu
9
vulnerability VCID-9h1q-9jzw-1bdk
10
vulnerability VCID-abcn-y96c-dfe3
11
vulnerability VCID-dfww-bthd-m3c5
12
vulnerability VCID-dzcy-yd29-x3fm
13
vulnerability VCID-e9ps-payd-abeu
14
vulnerability VCID-eduz-d41z-ekfw
15
vulnerability VCID-etn1-jujr-dkfu
16
vulnerability VCID-fcfm-c4dz-v3es
17
vulnerability VCID-gjjy-a7wb-qqaa
18
vulnerability VCID-gsss-za6y-c7hk
19
vulnerability VCID-guej-7tq7-fbb7
20
vulnerability VCID-hnvx-fk27-9keb
21
vulnerability VCID-mkxe-9gpy-ebdp
22
vulnerability VCID-mqhf-duvt-7yfk
23
vulnerability VCID-nd2m-v3wz-xfhw
24
vulnerability VCID-nejs-mnc1-syc5
25
vulnerability VCID-nesq-w996-akh4
26
vulnerability VCID-pyme-h5rf-bfhx
27
vulnerability VCID-q6h3-j4b9-4kfg
28
vulnerability VCID-rb6e-p5hw-kfa6
29
vulnerability VCID-rube-m1vm-d7hd
30
vulnerability VCID-s6ny-5vqq-uqg7
31
vulnerability VCID-t2vh-fkgc-tba9
32
vulnerability VCID-u393-uzrh-4bea
33
vulnerability VCID-unav-qy3e-2bd5
34
vulnerability VCID-venj-nk2m-pkd2
35
vulnerability VCID-vxsm-fcuq-y7e8
36
vulnerability VCID-w8dy-4cvu-ckcm
37
vulnerability VCID-wvjz-yynu-qbbf
38
vulnerability VCID-ym3c-dbhb-e3fs
39
vulnerability VCID-yse4-vy3c-xfea
40
vulnerability VCID-ytrg-5hh7-7qcq
41
vulnerability VCID-yybg-erer-jfaw
42
vulnerability VCID-zmuu-6s9z-cqd2
43
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.3.7
1
url pkg:gem/rack@1.4.2
purl pkg:gem/rack@1.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3eyy-mgk4-xue4
3
vulnerability VCID-3kfb-z5dw-hkfv
4
vulnerability VCID-3srh-99bk-ruft
5
vulnerability VCID-5a6b-yemd-mqgb
6
vulnerability VCID-7m5s-fgj3-v3c5
7
vulnerability VCID-7t6e-rm2b-s7a1
8
vulnerability VCID-8fp2-gkct-2fcu
9
vulnerability VCID-9h1q-9jzw-1bdk
10
vulnerability VCID-abcn-y96c-dfe3
11
vulnerability VCID-dfww-bthd-m3c5
12
vulnerability VCID-dzcy-yd29-x3fm
13
vulnerability VCID-e9ps-payd-abeu
14
vulnerability VCID-eduz-d41z-ekfw
15
vulnerability VCID-etn1-jujr-dkfu
16
vulnerability VCID-fcfm-c4dz-v3es
17
vulnerability VCID-gjjy-a7wb-qqaa
18
vulnerability VCID-gsss-za6y-c7hk
19
vulnerability VCID-guej-7tq7-fbb7
20
vulnerability VCID-hnvx-fk27-9keb
21
vulnerability VCID-mkxe-9gpy-ebdp
22
vulnerability VCID-mqhf-duvt-7yfk
23
vulnerability VCID-nd2m-v3wz-xfhw
24
vulnerability VCID-nejs-mnc1-syc5
25
vulnerability VCID-nesq-w996-akh4
26
vulnerability VCID-q6h3-j4b9-4kfg
27
vulnerability VCID-rb6e-p5hw-kfa6
28
vulnerability VCID-rube-m1vm-d7hd
29
vulnerability VCID-s6ny-5vqq-uqg7
30
vulnerability VCID-t2vh-fkgc-tba9
31
vulnerability VCID-u393-uzrh-4bea
32
vulnerability VCID-unav-qy3e-2bd5
33
vulnerability VCID-venj-nk2m-pkd2
34
vulnerability VCID-vxsm-fcuq-y7e8
35
vulnerability VCID-w8dy-4cvu-ckcm
36
vulnerability VCID-wvjz-yynu-qbbf
37
vulnerability VCID-ym3c-dbhb-e3fs
38
vulnerability VCID-yse4-vy3c-xfea
39
vulnerability VCID-ytrg-5hh7-7qcq
40
vulnerability VCID-yybg-erer-jfaw
41
vulnerability VCID-zmuu-6s9z-cqd2
42
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.4.2
aliases CVE-2012-6109, GHSA-h77x-m5q8-c29h, OSV-89317
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pyme-h5rf-bfhx
28
url VCID-q6h3-j4b9-4kfg
vulnerability_id VCID-q6h3-j4b9-4kfg
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61780.json
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61780.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61780
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01457
published_at 2026-06-11T12:55:00Z
1
value 0.00011
scoring_system epss
scoring_elements 0.0146
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61780
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61780
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61780
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1117855
reference_id 1117855
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1117855
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2403126
reference_id 2403126
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2403126
7
reference_url https://github.com/rack/rack/commit/57277b7741581fa827472c5c666f6e6a33abd784
reference_id 57277b7741581fa827472c5c666f6e6a33abd784
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-10T20:34:55Z/
url https://github.com/rack/rack/commit/57277b7741581fa827472c5c666f6e6a33abd784
8
reference_url https://github.com/rack/rack/commit/7e69f65eefe9cd2868df9f9f3b0977b86f93523a
reference_id 7e69f65eefe9cd2868df9f9f3b0977b86f93523a
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-10T20:34:55Z/
url https://github.com/rack/rack/commit/7e69f65eefe9cd2868df9f9f3b0977b86f93523a
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-61780
reference_id CVE-2025-61780
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-61780
10
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-61780.yml
reference_id CVE-2025-61780.YML
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-61780.yml
11
reference_url https://github.com/rack/rack/commit/fba2c8bc63eb787ff4b19bc612d315fda6126d85
reference_id fba2c8bc63eb787ff4b19bc612d315fda6126d85
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-10T20:34:55Z/
url https://github.com/rack/rack/commit/fba2c8bc63eb787ff4b19bc612d315fda6126d85
12
reference_url https://github.com/advisories/GHSA-r657-rxjc-j557
reference_id GHSA-r657-rxjc-j557
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r657-rxjc-j557
13
reference_url https://github.com/rack/rack/security/advisories/GHSA-r657-rxjc-j557
reference_id GHSA-r657-rxjc-j557
reference_type
scores
0
value 5.8
scoring_system cvssv3
scoring_elements
1
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-10T20:34:55Z/
url https://github.com/rack/rack/security/advisories/GHSA-r657-rxjc-j557
14
reference_url https://usn.ubuntu.com/7960-1/
reference_id USN-7960-1
reference_type
scores
url https://usn.ubuntu.com/7960-1/
fixed_packages
0
url pkg:gem/rack@2.2.20
purl pkg:gem/rack@2.2.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-rb6e-p5hw-kfa6
12
vulnerability VCID-t2vh-fkgc-tba9
13
vulnerability VCID-vxsm-fcuq-y7e8
14
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.20
1
url pkg:gem/rack@3.0.0.beta1
purl pkg:gem/rack@3.0.0.beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nesq-w996-akh4
22
vulnerability VCID-q6h3-j4b9-4kfg
23
vulnerability VCID-rb6e-p5hw-kfa6
24
vulnerability VCID-s6ny-5vqq-uqg7
25
vulnerability VCID-t2vh-fkgc-tba9
26
vulnerability VCID-vxsm-fcuq-y7e8
27
vulnerability VCID-w8dy-4cvu-ckcm
28
vulnerability VCID-wvjz-yynu-qbbf
29
vulnerability VCID-ym3c-dbhb-e3fs
30
vulnerability VCID-yybg-erer-jfaw
31
vulnerability VCID-zmuu-6s9z-cqd2
32
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.0.beta1
2
url pkg:gem/rack@3.1.18
purl pkg:gem/rack@3.1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-rb6e-p5hw-kfa6
12
vulnerability VCID-t2vh-fkgc-tba9
13
vulnerability VCID-vxsm-fcuq-y7e8
14
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.18
3
url pkg:gem/rack@3.2.3
purl pkg:gem/rack@3.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-rb6e-p5hw-kfa6
12
vulnerability VCID-t2vh-fkgc-tba9
13
vulnerability VCID-vxsm-fcuq-y7e8
14
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.3
aliases CVE-2025-61780, GHSA-r657-rxjc-j557
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q6h3-j4b9-4kfg
29
url VCID-rb6e-p5hw-kfa6
vulnerability_id VCID-rb6e-p5hw-kfa6
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34827.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34827.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34827
reference_id
reference_type
scores
0
value 0.00023
scoring_system epss
scoring_elements 0.06717
published_at 2026-06-11T12:55:00Z
1
value 0.00023
scoring_system epss
scoring_elements 0.06738
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34827
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34827
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34827
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34827.yml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34827.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-34827
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-34827
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454501
reference_id 2454501
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454501
8
reference_url https://github.com/advisories/GHSA-v6x5-cg8r-vv6x
reference_id GHSA-v6x5-cg8r-vv6x
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v6x5-cg8r-vv6x
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-v6x5-cg8r-vv6x
reference_id GHSA-v6x5-cg8r-vv6x
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-02T18:42:04Z/
url https://github.com/rack/rack/security/advisories/GHSA-v6x5-cg8r-vv6x
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@3.1.21
purl pkg:gem/rack@3.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.21
1
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-34827, GHSA-v6x5-cg8r-vv6x
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rb6e-p5hw-kfa6
30
url VCID-rube-m1vm-d7hd
vulnerability_id VCID-rube-m1vm-d7hd
summary
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00016.html
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00016.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16782.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16782.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-16782
reference_id
reference_type
scores
0
value 0.00892
scoring_system epss
scoring_elements 0.76087
published_at 2026-06-12T12:55:00Z
1
value 0.00892
scoring_system epss
scoring_elements 0.76016
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-16782
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16782
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16782
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
6
reference_url https://github.com/rack/rack/commit/7fecaee81f59926b6e1913511c90650e76673b38
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/commit/7fecaee81f59926b6e1913511c90650e76673b38
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZXMWILCICQLA2BYSP6I2CRMUG53YBLX
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZXMWILCICQLA2BYSP6I2CRMUG53YBLX
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZXMWILCICQLA2BYSP6I2CRMUG53YBLX
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZXMWILCICQLA2BYSP6I2CRMUG53YBLX
9
reference_url http://www.openwall.com/lists/oss-security/2019/12/18/2
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2019/12/18/2
10
reference_url http://www.openwall.com/lists/oss-security/2019/12/18/3
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2019/12/18/3
11
reference_url http://www.openwall.com/lists/oss-security/2019/12/19/3
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2019/12/19/3
12
reference_url http://www.openwall.com/lists/oss-security/2020/04/08/1
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2020/04/08/1
13
reference_url http://www.openwall.com/lists/oss-security/2020/04/09/2
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2020/04/09/2
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1789100
reference_id 1789100
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1789100
15
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946983
reference_id 946983
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946983
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-16782
reference_id CVE-2019-16782
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-16782
17
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2019-16782.yml
reference_id CVE-2019-16782.YML
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2019-16782.yml
18
reference_url https://github.com/advisories/GHSA-hrqr-hxpp-chr3
reference_id GHSA-hrqr-hxpp-chr3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hrqr-hxpp-chr3
19
reference_url https://github.com/rack/rack/security/advisories/GHSA-hrqr-hxpp-chr3
reference_id GHSA-hrqr-hxpp-chr3
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements
1
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/security/advisories/GHSA-hrqr-hxpp-chr3
20
reference_url https://access.redhat.com/errata/RHSA-2020:2480
reference_id RHSA-2020:2480
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2480
21
reference_url https://access.redhat.com/errata/RHSA-2020:4366
reference_id RHSA-2020:4366
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4366
22
reference_url https://access.redhat.com/errata/RHSA-2021:1313
reference_id RHSA-2021:1313
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1313
23
reference_url https://usn.ubuntu.com/USN-5253-1/
reference_id USN-USN-5253-1
reference_type
scores
url https://usn.ubuntu.com/USN-5253-1/
fixed_packages
0
url pkg:gem/rack@1.6.12
purl pkg:gem/rack@1.6.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-s6ny-5vqq-uqg7
28
vulnerability VCID-t2vh-fkgc-tba9
29
vulnerability VCID-unav-qy3e-2bd5
30
vulnerability VCID-vxsm-fcuq-y7e8
31
vulnerability VCID-w8dy-4cvu-ckcm
32
vulnerability VCID-wvjz-yynu-qbbf
33
vulnerability VCID-ym3c-dbhb-e3fs
34
vulnerability VCID-ytrg-5hh7-7qcq
35
vulnerability VCID-yybg-erer-jfaw
36
vulnerability VCID-zmuu-6s9z-cqd2
37
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.6.12
1
url pkg:gem/rack@2.0.0.alpha
purl pkg:gem/rack@2.0.0.alpha
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-rube-m1vm-d7hd
28
vulnerability VCID-s6ny-5vqq-uqg7
29
vulnerability VCID-t2vh-fkgc-tba9
30
vulnerability VCID-unav-qy3e-2bd5
31
vulnerability VCID-vxsm-fcuq-y7e8
32
vulnerability VCID-w8dy-4cvu-ckcm
33
vulnerability VCID-wvjz-yynu-qbbf
34
vulnerability VCID-ym3c-dbhb-e3fs
35
vulnerability VCID-ytrg-5hh7-7qcq
36
vulnerability VCID-yybg-erer-jfaw
37
vulnerability VCID-zmuu-6s9z-cqd2
38
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.0.0.alpha
2
url pkg:gem/rack@2.0.8
purl pkg:gem/rack@2.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-s6ny-5vqq-uqg7
28
vulnerability VCID-t2vh-fkgc-tba9
29
vulnerability VCID-unav-qy3e-2bd5
30
vulnerability VCID-vxsm-fcuq-y7e8
31
vulnerability VCID-w8dy-4cvu-ckcm
32
vulnerability VCID-wvjz-yynu-qbbf
33
vulnerability VCID-ym3c-dbhb-e3fs
34
vulnerability VCID-ytrg-5hh7-7qcq
35
vulnerability VCID-yybg-erer-jfaw
36
vulnerability VCID-zmuu-6s9z-cqd2
37
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.0.8
aliases CVE-2019-16782, GHSA-hrqr-hxpp-chr3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rube-m1vm-d7hd
31
url VCID-s6ny-5vqq-uqg7
vulnerability_id VCID-s6ny-5vqq-uqg7
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61919.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61919.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61919
reference_id
reference_type
scores
0
value 0.00282
scoring_system epss
scoring_elements 0.51897
published_at 2026-06-11T12:55:00Z
1
value 0.00282
scoring_system epss
scoring_elements 0.52027
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61919
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61919
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61919
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1117856
reference_id 1117856
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1117856
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2403180
reference_id 2403180
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2403180
7
reference_url https://github.com/rack/rack/commit/4e2c903991a790ee211a3021808ff4fd6fe82881
reference_id 4e2c903991a790ee211a3021808ff4fd6fe82881
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-10T20:48:10Z/
url https://github.com/rack/rack/commit/4e2c903991a790ee211a3021808ff4fd6fe82881
8
reference_url https://github.com/rack/rack/commit/cbd541e8a3d0c5830a3c9a30d3718ce2e124f9db
reference_id cbd541e8a3d0c5830a3c9a30d3718ce2e124f9db
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-10T20:48:10Z/
url https://github.com/rack/rack/commit/cbd541e8a3d0c5830a3c9a30d3718ce2e124f9db
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-61919
reference_id CVE-2025-61919
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-61919
10
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-61919.yml
reference_id CVE-2025-61919.YML
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-61919.yml
11
reference_url https://github.com/rack/rack/commit/e179614c4a653283286f5f046428cbb85f21146f
reference_id e179614c4a653283286f5f046428cbb85f21146f
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-10T20:48:10Z/
url https://github.com/rack/rack/commit/e179614c4a653283286f5f046428cbb85f21146f
12
reference_url https://github.com/advisories/GHSA-6xw4-3v39-52mm
reference_id GHSA-6xw4-3v39-52mm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6xw4-3v39-52mm
13
reference_url https://github.com/rack/rack/security/advisories/GHSA-6xw4-3v39-52mm
reference_id GHSA-6xw4-3v39-52mm
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-10T20:48:10Z/
url https://github.com/rack/rack/security/advisories/GHSA-6xw4-3v39-52mm
14
reference_url https://access.redhat.com/errata/RHSA-2025:19512
reference_id RHSA-2025:19512
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19512
15
reference_url https://access.redhat.com/errata/RHSA-2025:19513
reference_id RHSA-2025:19513
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19513
16
reference_url https://access.redhat.com/errata/RHSA-2025:19647
reference_id RHSA-2025:19647
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19647
17
reference_url https://access.redhat.com/errata/RHSA-2025:19719
reference_id RHSA-2025:19719
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19719
18
reference_url https://access.redhat.com/errata/RHSA-2025:19733
reference_id RHSA-2025:19733
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19733
19
reference_url https://access.redhat.com/errata/RHSA-2025:19734
reference_id RHSA-2025:19734
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19734
20
reference_url https://access.redhat.com/errata/RHSA-2025:19736
reference_id RHSA-2025:19736
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19736
21
reference_url https://access.redhat.com/errata/RHSA-2025:19800
reference_id RHSA-2025:19800
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19800
22
reference_url https://access.redhat.com/errata/RHSA-2025:19832
reference_id RHSA-2025:19832
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19832
23
reference_url https://access.redhat.com/errata/RHSA-2025:19855
reference_id RHSA-2025:19855
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19855
24
reference_url https://access.redhat.com/errata/RHSA-2025:19856
reference_id RHSA-2025:19856
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19856
25
reference_url https://access.redhat.com/errata/RHSA-2025:19948
reference_id RHSA-2025:19948
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19948
26
reference_url https://access.redhat.com/errata/RHSA-2025:20962
reference_id RHSA-2025:20962
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:20962
27
reference_url https://access.redhat.com/errata/RHSA-2025:21036
reference_id RHSA-2025:21036
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:21036
28
reference_url https://access.redhat.com/errata/RHSA-2025:21696
reference_id RHSA-2025:21696
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:21696
29
reference_url https://usn.ubuntu.com/7960-1/
reference_id USN-7960-1
reference_type
scores
url https://usn.ubuntu.com/7960-1/
fixed_packages
0
url pkg:gem/rack@2.2.20
purl pkg:gem/rack@2.2.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-rb6e-p5hw-kfa6
12
vulnerability VCID-t2vh-fkgc-tba9
13
vulnerability VCID-vxsm-fcuq-y7e8
14
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.20
1
url pkg:gem/rack@3.0.0.beta1
purl pkg:gem/rack@3.0.0.beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nesq-w996-akh4
22
vulnerability VCID-q6h3-j4b9-4kfg
23
vulnerability VCID-rb6e-p5hw-kfa6
24
vulnerability VCID-s6ny-5vqq-uqg7
25
vulnerability VCID-t2vh-fkgc-tba9
26
vulnerability VCID-vxsm-fcuq-y7e8
27
vulnerability VCID-w8dy-4cvu-ckcm
28
vulnerability VCID-wvjz-yynu-qbbf
29
vulnerability VCID-ym3c-dbhb-e3fs
30
vulnerability VCID-yybg-erer-jfaw
31
vulnerability VCID-zmuu-6s9z-cqd2
32
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.0.beta1
2
url pkg:gem/rack@3.1.18
purl pkg:gem/rack@3.1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-rb6e-p5hw-kfa6
12
vulnerability VCID-t2vh-fkgc-tba9
13
vulnerability VCID-vxsm-fcuq-y7e8
14
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.18
3
url pkg:gem/rack@3.2.3
purl pkg:gem/rack@3.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-rb6e-p5hw-kfa6
12
vulnerability VCID-t2vh-fkgc-tba9
13
vulnerability VCID-vxsm-fcuq-y7e8
14
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.3
aliases CVE-2025-61919, GHSA-6xw4-3v39-52mm
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s6ny-5vqq-uqg7
32
url VCID-t2vh-fkgc-tba9
vulnerability_id VCID-t2vh-fkgc-tba9
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34230.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34230.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34230
reference_id
reference_type
scores
0
value 0.00023
scoring_system epss
scoring_elements 0.06744
published_at 2026-06-11T12:55:00Z
1
value 0.00023
scoring_system epss
scoring_elements 0.06763
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34230
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34230
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34230
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34230.yml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34230.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-34230
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-34230
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454493
reference_id 2454493
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454493
8
reference_url https://github.com/advisories/GHSA-v569-hp3g-36wr
reference_id GHSA-v569-hp3g-36wr
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v569-hp3g-36wr
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-v569-hp3g-36wr
reference_id GHSA-v569-hp3g-36wr
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
2
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
4
value HIGH
scoring_system generic_textual
scoring_elements
5
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-02T18:56:03Z/
url https://github.com/rack/rack/security/advisories/GHSA-v569-hp3g-36wr
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@2.2.23
purl pkg:gem/rack@2.2.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.23
1
url pkg:gem/rack@3.1.21
purl pkg:gem/rack@3.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.21
2
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-34230, GHSA-v569-hp3g-36wr
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t2vh-fkgc-tba9
33
url VCID-u393-uzrh-4bea
vulnerability_id VCID-u393-uzrh-4bea
summary 
Multiple vulnerabilities have been found in Rack, the worst of
    which allow execution of arbitrary code.
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2013-0544.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0544.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2013-0548.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0548.html
3
reference_url https://access.redhat.com/errata/RHSA-2013:0544
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2013:0544
4
reference_url https://access.redhat.com/errata/RHSA-2013:0548
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2013:0548
5
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0184.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0184.json
6
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-0184
reference_id
reference_type
scores
0
value 0.00677
scoring_system epss
scoring_elements 0.72087
published_at 2026-06-12T12:55:00Z
1
value 0.00677
scoring_system epss
scoring_elements 0.72003
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-0184
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=895384
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=895384
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0184
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0184
9
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
10
reference_url https://github.com/rack/rack/commit/1f61549529d07abd4aa512b8320ab0e97dcacc5d
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/commit/1f61549529d07abd4aa512b8320ab0e97dcacc5d
11
reference_url http://www.debian.org/security/2013/dsa-2783
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2013/dsa-2783
12
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698440
reference_id 698440
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698440
13
reference_url https://access.redhat.com/security/cve/CVE-2013-0184
reference_id CVE-2013-0184
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/cve/CVE-2013-0184
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-0184
reference_id CVE-2013-0184
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-0184
15
reference_url https://github.com/advisories/GHSA-v882-ccj6-jc48
reference_id GHSA-v882-ccj6-jc48
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v882-ccj6-jc48
16
reference_url https://security.gentoo.org/glsa/201405-10
reference_id GLSA-201405-10
reference_type
scores
url https://security.gentoo.org/glsa/201405-10
fixed_packages
0
url pkg:gem/rack@1.3.9
purl pkg:gem/rack@1.3.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3eyy-mgk4-xue4
3
vulnerability VCID-3kfb-z5dw-hkfv
4
vulnerability VCID-3srh-99bk-ruft
5
vulnerability VCID-5a6b-yemd-mqgb
6
vulnerability VCID-7m5s-fgj3-v3c5
7
vulnerability VCID-7t6e-rm2b-s7a1
8
vulnerability VCID-8fp2-gkct-2fcu
9
vulnerability VCID-9h1q-9jzw-1bdk
10
vulnerability VCID-abcn-y96c-dfe3
11
vulnerability VCID-dfww-bthd-m3c5
12
vulnerability VCID-dzcy-yd29-x3fm
13
vulnerability VCID-e9ps-payd-abeu
14
vulnerability VCID-eduz-d41z-ekfw
15
vulnerability VCID-etn1-jujr-dkfu
16
vulnerability VCID-fcfm-c4dz-v3es
17
vulnerability VCID-gjjy-a7wb-qqaa
18
vulnerability VCID-gsss-za6y-c7hk
19
vulnerability VCID-guej-7tq7-fbb7
20
vulnerability VCID-hnvx-fk27-9keb
21
vulnerability VCID-mkxe-9gpy-ebdp
22
vulnerability VCID-mqhf-duvt-7yfk
23
vulnerability VCID-nd2m-v3wz-xfhw
24
vulnerability VCID-nejs-mnc1-syc5
25
vulnerability VCID-nesq-w996-akh4
26
vulnerability VCID-pyme-h5rf-bfhx
27
vulnerability VCID-q6h3-j4b9-4kfg
28
vulnerability VCID-rb6e-p5hw-kfa6
29
vulnerability VCID-rube-m1vm-d7hd
30
vulnerability VCID-s6ny-5vqq-uqg7
31
vulnerability VCID-t2vh-fkgc-tba9
32
vulnerability VCID-u393-uzrh-4bea
33
vulnerability VCID-unav-qy3e-2bd5
34
vulnerability VCID-venj-nk2m-pkd2
35
vulnerability VCID-vxsm-fcuq-y7e8
36
vulnerability VCID-w8dy-4cvu-ckcm
37
vulnerability VCID-wvjz-yynu-qbbf
38
vulnerability VCID-ym3c-dbhb-e3fs
39
vulnerability VCID-yse4-vy3c-xfea
40
vulnerability VCID-ytrg-5hh7-7qcq
41
vulnerability VCID-yybg-erer-jfaw
42
vulnerability VCID-zmuu-6s9z-cqd2
43
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.3.9
1
url pkg:gem/rack@1.4.4
purl pkg:gem/rack@1.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3kfb-z5dw-hkfv
3
vulnerability VCID-3srh-99bk-ruft
4
vulnerability VCID-5a6b-yemd-mqgb
5
vulnerability VCID-7m5s-fgj3-v3c5
6
vulnerability VCID-7t6e-rm2b-s7a1
7
vulnerability VCID-8fp2-gkct-2fcu
8
vulnerability VCID-9h1q-9jzw-1bdk
9
vulnerability VCID-abcn-y96c-dfe3
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-rube-m1vm-d7hd
28
vulnerability VCID-s6ny-5vqq-uqg7
29
vulnerability VCID-t2vh-fkgc-tba9
30
vulnerability VCID-unav-qy3e-2bd5
31
vulnerability VCID-venj-nk2m-pkd2
32
vulnerability VCID-vxsm-fcuq-y7e8
33
vulnerability VCID-w8dy-4cvu-ckcm
34
vulnerability VCID-wvjz-yynu-qbbf
35
vulnerability VCID-ym3c-dbhb-e3fs
36
vulnerability VCID-yse4-vy3c-xfea
37
vulnerability VCID-ytrg-5hh7-7qcq
38
vulnerability VCID-yybg-erer-jfaw
39
vulnerability VCID-zmuu-6s9z-cqd2
40
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.4.4
2
url pkg:gem/rack@1.5.0.beta.1
purl pkg:gem/rack@1.5.0.beta.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3kfb-z5dw-hkfv
3
vulnerability VCID-3srh-99bk-ruft
4
vulnerability VCID-5a6b-yemd-mqgb
5
vulnerability VCID-7m5s-fgj3-v3c5
6
vulnerability VCID-7t6e-rm2b-s7a1
7
vulnerability VCID-8fp2-gkct-2fcu
8
vulnerability VCID-9h1q-9jzw-1bdk
9
vulnerability VCID-abcn-y96c-dfe3
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-rube-m1vm-d7hd
28
vulnerability VCID-s6ny-5vqq-uqg7
29
vulnerability VCID-t2vh-fkgc-tba9
30
vulnerability VCID-u393-uzrh-4bea
31
vulnerability VCID-unav-qy3e-2bd5
32
vulnerability VCID-venj-nk2m-pkd2
33
vulnerability VCID-vxsm-fcuq-y7e8
34
vulnerability VCID-w8dy-4cvu-ckcm
35
vulnerability VCID-wvjz-yynu-qbbf
36
vulnerability VCID-ym3c-dbhb-e3fs
37
vulnerability VCID-yse4-vy3c-xfea
38
vulnerability VCID-ytrg-5hh7-7qcq
39
vulnerability VCID-yybg-erer-jfaw
40
vulnerability VCID-zmuu-6s9z-cqd2
41
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.5.0.beta.1
aliases CVE-2013-0184, GHSA-v882-ccj6-jc48, OSV-89327
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u393-uzrh-4bea
34
url VCID-unav-qy3e-2bd5
vulnerability_id VCID-unav-qy3e-2bd5
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32441.json
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32441.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-32441
reference_id
reference_type
scores
0
value 0.00096
scoring_system epss
scoring_elements 0.26521
published_at 2026-06-11T12:55:00Z
1
value 0.00096
scoring_system epss
scoring_elements 0.26722
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-32441
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32441
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32441
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-32441.yml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-32441.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-32441
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-32441
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2364965
reference_id 2364965
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2364965
8
reference_url https://github.com/rack/rack/commit/c48e52f7c57e99e1e1bf54c8760d4f082cd1c89d
reference_id c48e52f7c57e99e1e1bf54c8760d4f082cd1c89d
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-08T14:02:00Z/
url https://github.com/rack/rack/commit/c48e52f7c57e99e1e1bf54c8760d4f082cd1c89d
9
reference_url https://github.com/rack/rack-session/security/advisories/GHSA-9j94-67jr-4cqj
reference_id GHSA-9j94-67jr-4cqj
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements
1
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack-session/security/advisories/GHSA-9j94-67jr-4cqj
10
reference_url https://github.com/advisories/GHSA-vpfw-47h7-xj4g
reference_id GHSA-vpfw-47h7-xj4g
reference_type
scores
url https://github.com/advisories/GHSA-vpfw-47h7-xj4g
11
reference_url https://github.com/rack/rack/security/advisories/GHSA-vpfw-47h7-xj4g
reference_id GHSA-vpfw-47h7-xj4g
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-08T14:02:00Z/
url https://github.com/rack/rack/security/advisories/GHSA-vpfw-47h7-xj4g
12
reference_url https://github.com/rack/rack/blob/v2.2.13/lib/rack/session/abstract/id.rb#L263-L270
reference_id id.rb#L263-L270
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-08T14:02:00Z/
url https://github.com/rack/rack/blob/v2.2.13/lib/rack/session/abstract/id.rb#L263-L270
13
reference_url https://usn.ubuntu.com/7507-1/
reference_id USN-7507-1
reference_type
scores
url https://usn.ubuntu.com/7507-1/
fixed_packages
0
url pkg:gem/rack@2.2.14
purl pkg:gem/rack@2.2.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-eduz-d41z-ekfw
7
vulnerability VCID-fcfm-c4dz-v3es
8
vulnerability VCID-gjjy-a7wb-qqaa
9
vulnerability VCID-gsss-za6y-c7hk
10
vulnerability VCID-guej-7tq7-fbb7
11
vulnerability VCID-mqhf-duvt-7yfk
12
vulnerability VCID-nd2m-v3wz-xfhw
13
vulnerability VCID-nejs-mnc1-syc5
14
vulnerability VCID-nesq-w996-akh4
15
vulnerability VCID-q6h3-j4b9-4kfg
16
vulnerability VCID-rb6e-p5hw-kfa6
17
vulnerability VCID-s6ny-5vqq-uqg7
18
vulnerability VCID-t2vh-fkgc-tba9
19
vulnerability VCID-vxsm-fcuq-y7e8
20
vulnerability VCID-ym3c-dbhb-e3fs
21
vulnerability VCID-yybg-erer-jfaw
22
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.14
aliases CVE-2025-32441, GHSA-vpfw-47h7-xj4g
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-unav-qy3e-2bd5
35
url VCID-venj-nk2m-pkd2
vulnerability_id VCID-venj-nk2m-pkd2
summary security update
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164173.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164173.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165180.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165180.html
2
reference_url http://lists.opensuse.org/opensuse-updates/2015-07/msg00040.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-07/msg00040.html
3
reference_url http://lists.opensuse.org/opensuse-updates/2015-07/msg00043.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-07/msg00043.html
4
reference_url http://lists.opensuse.org/opensuse-updates/2015-07/msg00044.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2015-07/msg00044.html
5
reference_url http://openwall.com/lists/oss-security/2015/06/16/14
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2015/06/16/14
6
reference_url http://rhn.redhat.com/errata/RHSA-2015-2290.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-2290.html
7
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3225.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3225.json
8
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3225
reference_id
reference_type
scores
0
value 0.13251
scoring_system epss
scoring_elements 0.94331
published_at 2026-06-12T12:55:00Z
1
value 0.13251
scoring_system epss
scoring_elements 0.94311
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3225
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3225
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3225
10
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
11
reference_url https://github.com/rack/rack/blob/master/HISTORY.md
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/blob/master/HISTORY.md
12
reference_url https://github.com/rack/rack/commits/1.4.6
reference_id
reference_type
scores
url https://github.com/rack/rack/commits/1.4.6
13
reference_url https://groups.google.com/forum/#!topic/ruby-security-ann/gcUbICUmKMc
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!topic/ruby-security-ann/gcUbICUmKMc
14
reference_url http://www.debian.org/security/2015/dsa-3322
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2015/dsa-3322
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1232292
reference_id 1232292
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1232292
16
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789311
reference_id 789311
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789311
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-3225
reference_id CVE-2015-3225
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-3225
18
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2015-3225.yml
reference_id CVE-2015-3225.YML
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2015-3225.yml
19
reference_url https://github.com/advisories/GHSA-rgr4-9jh5-j4j6
reference_id GHSA-rgr4-9jh5-j4j6
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rgr4-9jh5-j4j6
20
reference_url https://access.redhat.com/errata/RHSA-2015:2290
reference_id RHSA-2015:2290
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2290
fixed_packages
0
url pkg:gem/rack@1.4.6
purl pkg:gem/rack@1.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-hnvx-fk27-9keb
19
vulnerability VCID-mkxe-9gpy-ebdp
20
vulnerability VCID-mqhf-duvt-7yfk
21
vulnerability VCID-nd2m-v3wz-xfhw
22
vulnerability VCID-nejs-mnc1-syc5
23
vulnerability VCID-nesq-w996-akh4
24
vulnerability VCID-q6h3-j4b9-4kfg
25
vulnerability VCID-rb6e-p5hw-kfa6
26
vulnerability VCID-rube-m1vm-d7hd
27
vulnerability VCID-s6ny-5vqq-uqg7
28
vulnerability VCID-t2vh-fkgc-tba9
29
vulnerability VCID-unav-qy3e-2bd5
30
vulnerability VCID-vxsm-fcuq-y7e8
31
vulnerability VCID-w8dy-4cvu-ckcm
32
vulnerability VCID-wvjz-yynu-qbbf
33
vulnerability VCID-ym3c-dbhb-e3fs
34
vulnerability VCID-ytrg-5hh7-7qcq
35
vulnerability VCID-yybg-erer-jfaw
36
vulnerability VCID-zmuu-6s9z-cqd2
37
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.4.6
1
url pkg:gem/rack@1.5.0.beta.1
purl pkg:gem/rack@1.5.0.beta.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3kfb-z5dw-hkfv
3
vulnerability VCID-3srh-99bk-ruft
4
vulnerability VCID-5a6b-yemd-mqgb
5
vulnerability VCID-7m5s-fgj3-v3c5
6
vulnerability VCID-7t6e-rm2b-s7a1
7
vulnerability VCID-8fp2-gkct-2fcu
8
vulnerability VCID-9h1q-9jzw-1bdk
9
vulnerability VCID-abcn-y96c-dfe3
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-rube-m1vm-d7hd
28
vulnerability VCID-s6ny-5vqq-uqg7
29
vulnerability VCID-t2vh-fkgc-tba9
30
vulnerability VCID-u393-uzrh-4bea
31
vulnerability VCID-unav-qy3e-2bd5
32
vulnerability VCID-venj-nk2m-pkd2
33
vulnerability VCID-vxsm-fcuq-y7e8
34
vulnerability VCID-w8dy-4cvu-ckcm
35
vulnerability VCID-wvjz-yynu-qbbf
36
vulnerability VCID-ym3c-dbhb-e3fs
37
vulnerability VCID-yse4-vy3c-xfea
38
vulnerability VCID-ytrg-5hh7-7qcq
39
vulnerability VCID-yybg-erer-jfaw
40
vulnerability VCID-zmuu-6s9z-cqd2
41
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.5.0.beta.1
2
url pkg:gem/rack@1.5.4
purl pkg:gem/rack@1.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-rube-m1vm-d7hd
28
vulnerability VCID-s6ny-5vqq-uqg7
29
vulnerability VCID-t2vh-fkgc-tba9
30
vulnerability VCID-unav-qy3e-2bd5
31
vulnerability VCID-vxsm-fcuq-y7e8
32
vulnerability VCID-w8dy-4cvu-ckcm
33
vulnerability VCID-wvjz-yynu-qbbf
34
vulnerability VCID-ym3c-dbhb-e3fs
35
vulnerability VCID-ytrg-5hh7-7qcq
36
vulnerability VCID-yybg-erer-jfaw
37
vulnerability VCID-zmuu-6s9z-cqd2
38
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.5.4
3
url pkg:gem/rack@1.6.0.beta
purl pkg:gem/rack@1.6.0.beta
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-rube-m1vm-d7hd
28
vulnerability VCID-s6ny-5vqq-uqg7
29
vulnerability VCID-t2vh-fkgc-tba9
30
vulnerability VCID-unav-qy3e-2bd5
31
vulnerability VCID-venj-nk2m-pkd2
32
vulnerability VCID-vxsm-fcuq-y7e8
33
vulnerability VCID-w8dy-4cvu-ckcm
34
vulnerability VCID-wvjz-yynu-qbbf
35
vulnerability VCID-ym3c-dbhb-e3fs
36
vulnerability VCID-ytrg-5hh7-7qcq
37
vulnerability VCID-yybg-erer-jfaw
38
vulnerability VCID-zmuu-6s9z-cqd2
39
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.6.0.beta
4
url pkg:gem/rack@1.6.2
purl pkg:gem/rack@1.6.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-fv6g-2b1r-zqbx
17
vulnerability VCID-gjjy-a7wb-qqaa
18
vulnerability VCID-gsss-za6y-c7hk
19
vulnerability VCID-guej-7tq7-fbb7
20
vulnerability VCID-hnvx-fk27-9keb
21
vulnerability VCID-mkxe-9gpy-ebdp
22
vulnerability VCID-mqhf-duvt-7yfk
23
vulnerability VCID-nd2m-v3wz-xfhw
24
vulnerability VCID-nejs-mnc1-syc5
25
vulnerability VCID-nesq-w996-akh4
26
vulnerability VCID-q6h3-j4b9-4kfg
27
vulnerability VCID-rb6e-p5hw-kfa6
28
vulnerability VCID-rube-m1vm-d7hd
29
vulnerability VCID-s6ny-5vqq-uqg7
30
vulnerability VCID-t2vh-fkgc-tba9
31
vulnerability VCID-unav-qy3e-2bd5
32
vulnerability VCID-vxsm-fcuq-y7e8
33
vulnerability VCID-w8dy-4cvu-ckcm
34
vulnerability VCID-wvjz-yynu-qbbf
35
vulnerability VCID-ym3c-dbhb-e3fs
36
vulnerability VCID-ytrg-5hh7-7qcq
37
vulnerability VCID-yybg-erer-jfaw
38
vulnerability VCID-zmuu-6s9z-cqd2
39
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.6.2
aliases CVE-2015-3225, GHSA-rgr4-9jh5-j4j6
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-venj-nk2m-pkd2
36
url VCID-vxsm-fcuq-y7e8
vulnerability_id VCID-vxsm-fcuq-y7e8
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-26961.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-26961.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-26961
reference_id
reference_type
scores
0
value 0.00015
scoring_system epss
scoring_elements 0.03076
published_at 2026-06-11T12:55:00Z
1
value 0.00015
scoring_system epss
scoring_elements 0.03088
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-26961
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26961
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26961
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-26961.yml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-26961.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-26961
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-26961
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454483
reference_id 2454483
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454483
8
reference_url https://github.com/advisories/GHSA-vgpv-f759-9wx3
reference_id GHSA-vgpv-f759-9wx3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vgpv-f759-9wx3
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-vgpv-f759-9wx3
reference_id GHSA-vgpv-f759-9wx3
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements
1
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
2
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
3
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
4
value MODERATE
scoring_system generic_textual
scoring_elements
5
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-03T17:57:50Z/
url https://github.com/rack/rack/security/advisories/GHSA-vgpv-f759-9wx3
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@2.2.23
purl pkg:gem/rack@2.2.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.23
1
url pkg:gem/rack@3.1.21
purl pkg:gem/rack@3.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.21
2
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-26961, GHSA-vgpv-f759-9wx3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vxsm-fcuq-y7e8
37
url VCID-w8dy-4cvu-ckcm
vulnerability_id VCID-w8dy-4cvu-ckcm
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27111.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27111.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-27111
reference_id
reference_type
scores
0
value 0.00668
scoring_system epss
scoring_elements 0.71751
published_at 2026-06-11T12:55:00Z
1
value 0.00668
scoring_system epss
scoring_elements 0.71837
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-27111
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27111
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27111
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-27111.yml
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-27111.yml
6
reference_url https://lists.debian.org/debian-lts-announce/2025/03/msg00016.html
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2025/03/msg00016.html
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-27111
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-27111
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1099546
reference_id 1099546
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1099546
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2349810
reference_id 2349810
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2349810
10
reference_url https://github.com/rack/rack/commit/803aa221e8302719715e224f4476e438f2531a53
reference_id 803aa221e8302719715e224f4476e438f2531a53
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-04T15:44:28Z/
url https://github.com/rack/rack/commit/803aa221e8302719715e224f4476e438f2531a53
11
reference_url https://github.com/rack/rack/commit/aeac570bb8080ca7b53b7f2e2f67498be7ebd30b
reference_id aeac570bb8080ca7b53b7f2e2f67498be7ebd30b
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-04T15:44:28Z/
url https://github.com/rack/rack/commit/aeac570bb8080ca7b53b7f2e2f67498be7ebd30b
12
reference_url https://github.com/rack/rack/commit/b13bc6bfc7506aca3478dc5ac1c2ec6fc53f82a3
reference_id b13bc6bfc7506aca3478dc5ac1c2ec6fc53f82a3
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-04T15:44:28Z/
url https://github.com/rack/rack/commit/b13bc6bfc7506aca3478dc5ac1c2ec6fc53f82a3
13
reference_url https://github.com/advisories/GHSA-8cgq-6mh2-7j6v
reference_id GHSA-8cgq-6mh2-7j6v
reference_type
scores
url https://github.com/advisories/GHSA-8cgq-6mh2-7j6v
14
reference_url https://github.com/rack/rack/security/advisories/GHSA-8cgq-6mh2-7j6v
reference_id GHSA-8cgq-6mh2-7j6v
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-04T15:44:28Z/
url https://github.com/rack/rack/security/advisories/GHSA-8cgq-6mh2-7j6v
15
reference_url https://usn.ubuntu.com/7366-1/
reference_id USN-7366-1
reference_type
scores
url https://usn.ubuntu.com/7366-1/
16
reference_url https://usn.ubuntu.com/7366-2/
reference_id USN-7366-2
reference_type
scores
url https://usn.ubuntu.com/7366-2/
fixed_packages
0
url pkg:gem/rack@2.2.12
purl pkg:gem/rack@2.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-e9ps-payd-abeu
7
vulnerability VCID-eduz-d41z-ekfw
8
vulnerability VCID-fcfm-c4dz-v3es
9
vulnerability VCID-gjjy-a7wb-qqaa
10
vulnerability VCID-gsss-za6y-c7hk
11
vulnerability VCID-guej-7tq7-fbb7
12
vulnerability VCID-mqhf-duvt-7yfk
13
vulnerability VCID-nd2m-v3wz-xfhw
14
vulnerability VCID-nejs-mnc1-syc5
15
vulnerability VCID-nesq-w996-akh4
16
vulnerability VCID-q6h3-j4b9-4kfg
17
vulnerability VCID-rb6e-p5hw-kfa6
18
vulnerability VCID-s6ny-5vqq-uqg7
19
vulnerability VCID-t2vh-fkgc-tba9
20
vulnerability VCID-unav-qy3e-2bd5
21
vulnerability VCID-vxsm-fcuq-y7e8
22
vulnerability VCID-ym3c-dbhb-e3fs
23
vulnerability VCID-yybg-erer-jfaw
24
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.12
1
url pkg:gem/rack@3.0.0.beta1
purl pkg:gem/rack@3.0.0.beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nesq-w996-akh4
22
vulnerability VCID-q6h3-j4b9-4kfg
23
vulnerability VCID-rb6e-p5hw-kfa6
24
vulnerability VCID-s6ny-5vqq-uqg7
25
vulnerability VCID-t2vh-fkgc-tba9
26
vulnerability VCID-vxsm-fcuq-y7e8
27
vulnerability VCID-w8dy-4cvu-ckcm
28
vulnerability VCID-wvjz-yynu-qbbf
29
vulnerability VCID-ym3c-dbhb-e3fs
30
vulnerability VCID-yybg-erer-jfaw
31
vulnerability VCID-zmuu-6s9z-cqd2
32
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.0.beta1
2
url pkg:gem/rack@3.0.13
purl pkg:gem/rack@3.0.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-e9ps-payd-abeu
7
vulnerability VCID-eduz-d41z-ekfw
8
vulnerability VCID-fcfm-c4dz-v3es
9
vulnerability VCID-gjjy-a7wb-qqaa
10
vulnerability VCID-gsss-za6y-c7hk
11
vulnerability VCID-guej-7tq7-fbb7
12
vulnerability VCID-mqhf-duvt-7yfk
13
vulnerability VCID-nd2m-v3wz-xfhw
14
vulnerability VCID-nesq-w996-akh4
15
vulnerability VCID-q6h3-j4b9-4kfg
16
vulnerability VCID-rb6e-p5hw-kfa6
17
vulnerability VCID-s6ny-5vqq-uqg7
18
vulnerability VCID-t2vh-fkgc-tba9
19
vulnerability VCID-vxsm-fcuq-y7e8
20
vulnerability VCID-ym3c-dbhb-e3fs
21
vulnerability VCID-yybg-erer-jfaw
22
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.13
3
url pkg:gem/rack@3.1.11
purl pkg:gem/rack@3.1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-e9ps-payd-abeu
7
vulnerability VCID-eduz-d41z-ekfw
8
vulnerability VCID-fcfm-c4dz-v3es
9
vulnerability VCID-gjjy-a7wb-qqaa
10
vulnerability VCID-gsss-za6y-c7hk
11
vulnerability VCID-guej-7tq7-fbb7
12
vulnerability VCID-mqhf-duvt-7yfk
13
vulnerability VCID-nd2m-v3wz-xfhw
14
vulnerability VCID-nesq-w996-akh4
15
vulnerability VCID-q6h3-j4b9-4kfg
16
vulnerability VCID-rb6e-p5hw-kfa6
17
vulnerability VCID-s6ny-5vqq-uqg7
18
vulnerability VCID-t2vh-fkgc-tba9
19
vulnerability VCID-vxsm-fcuq-y7e8
20
vulnerability VCID-ym3c-dbhb-e3fs
21
vulnerability VCID-yybg-erer-jfaw
22
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.11
aliases CVE-2025-27111, GHSA-8cgq-6mh2-7j6v
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w8dy-4cvu-ckcm
38
url VCID-wvjz-yynu-qbbf
vulnerability_id VCID-wvjz-yynu-qbbf
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-25126.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-25126.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25126
reference_id
reference_type
scores
0
value 0.0045
scoring_system epss
scoring_elements 0.64193
published_at 2026-06-12T12:55:00Z
1
value 0.0045
scoring_system epss
scoring_elements 0.6409
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25126
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25126
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25126
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26141
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26146
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
7
reference_url https://security.netapp.com/advisory/ntap-20240510-0005
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20240510-0005
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1064516
reference_id 1064516
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1064516
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2265593
reference_id 2265593
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2265593
10
reference_url https://github.com/rack/rack/commit/6efb2ceea003c4b195815a614e00438cbd543462
reference_id 6efb2ceea003c4b195815a614e00438cbd543462
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-12T17:41:06Z/
url https://github.com/rack/rack/commit/6efb2ceea003c4b195815a614e00438cbd543462
11
reference_url https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941
reference_id 84941
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-12T17:41:06Z/
url https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25126
reference_id CVE-2024-25126
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25126
13
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-25126.yml
reference_id CVE-2024-25126.yml
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-12T17:41:06Z/
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-25126.yml
14
reference_url https://github.com/rack/rack/commit/d9c163a443b8cadf4711d84bd2c58cb9ef89cf49
reference_id d9c163a443b8cadf4711d84bd2c58cb9ef89cf49
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-12T17:41:06Z/
url https://github.com/rack/rack/commit/d9c163a443b8cadf4711d84bd2c58cb9ef89cf49
15
reference_url https://github.com/advisories/GHSA-22f2-v57c-j9cx
reference_id GHSA-22f2-v57c-j9cx
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-22f2-v57c-j9cx
16
reference_url https://github.com/rack/rack/security/advisories/GHSA-22f2-v57c-j9cx
reference_id GHSA-22f2-v57c-j9cx
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-12T17:41:06Z/
url https://github.com/rack/rack/security/advisories/GHSA-22f2-v57c-j9cx
17
reference_url https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html
reference_id msg00022.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-12T17:41:06Z/
url https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html
18
reference_url https://security.netapp.com/advisory/ntap-20240510-0005/
reference_id ntap-20240510-0005
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-12T17:41:06Z/
url https://security.netapp.com/advisory/ntap-20240510-0005/
19
reference_url https://access.redhat.com/errata/RHSA-2024:10806
reference_id RHSA-2024:10806
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:10806
20
reference_url https://access.redhat.com/errata/RHSA-2024:1841
reference_id RHSA-2024:1841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1841
21
reference_url https://access.redhat.com/errata/RHSA-2024:1846
reference_id RHSA-2024:1846
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1846
22
reference_url https://access.redhat.com/errata/RHSA-2024:2007
reference_id RHSA-2024:2007
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2007
23
reference_url https://access.redhat.com/errata/RHSA-2024:2113
reference_id RHSA-2024:2113
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2113
24
reference_url https://access.redhat.com/errata/RHSA-2024:2581
reference_id RHSA-2024:2581
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2581
25
reference_url https://access.redhat.com/errata/RHSA-2024:2584
reference_id RHSA-2024:2584
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2584
26
reference_url https://access.redhat.com/errata/RHSA-2024:2953
reference_id RHSA-2024:2953
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2953
27
reference_url https://access.redhat.com/errata/RHSA-2024:3431
reference_id RHSA-2024:3431
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:3431
28
reference_url https://usn.ubuntu.com/6837-1/
reference_id USN-6837-1
reference_type
scores
url https://usn.ubuntu.com/6837-1/
29
reference_url https://usn.ubuntu.com/6837-2/
reference_id USN-6837-2
reference_type
scores
url https://usn.ubuntu.com/6837-2/
30
reference_url https://usn.ubuntu.com/7036-1/
reference_id USN-7036-1
reference_type
scores
url https://usn.ubuntu.com/7036-1/
fixed_packages
0
url pkg:gem/rack@2.2.8.1
purl pkg:gem/rack@2.2.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-9h1q-9jzw-1bdk
6
vulnerability VCID-abcn-y96c-dfe3
7
vulnerability VCID-e9ps-payd-abeu
8
vulnerability VCID-eduz-d41z-ekfw
9
vulnerability VCID-fcfm-c4dz-v3es
10
vulnerability VCID-gjjy-a7wb-qqaa
11
vulnerability VCID-gsss-za6y-c7hk
12
vulnerability VCID-guej-7tq7-fbb7
13
vulnerability VCID-mkxe-9gpy-ebdp
14
vulnerability VCID-mqhf-duvt-7yfk
15
vulnerability VCID-nd2m-v3wz-xfhw
16
vulnerability VCID-nejs-mnc1-syc5
17
vulnerability VCID-nesq-w996-akh4
18
vulnerability VCID-q6h3-j4b9-4kfg
19
vulnerability VCID-rb6e-p5hw-kfa6
20
vulnerability VCID-s6ny-5vqq-uqg7
21
vulnerability VCID-t2vh-fkgc-tba9
22
vulnerability VCID-unav-qy3e-2bd5
23
vulnerability VCID-vxsm-fcuq-y7e8
24
vulnerability VCID-w8dy-4cvu-ckcm
25
vulnerability VCID-ym3c-dbhb-e3fs
26
vulnerability VCID-yybg-erer-jfaw
27
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.8.1
1
url pkg:gem/rack@3.0.9.1
purl pkg:gem/rack@3.0.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-9h1q-9jzw-1bdk
6
vulnerability VCID-abcn-y96c-dfe3
7
vulnerability VCID-e9ps-payd-abeu
8
vulnerability VCID-eduz-d41z-ekfw
9
vulnerability VCID-fcfm-c4dz-v3es
10
vulnerability VCID-gjjy-a7wb-qqaa
11
vulnerability VCID-gsss-za6y-c7hk
12
vulnerability VCID-guej-7tq7-fbb7
13
vulnerability VCID-mkxe-9gpy-ebdp
14
vulnerability VCID-mqhf-duvt-7yfk
15
vulnerability VCID-nd2m-v3wz-xfhw
16
vulnerability VCID-nesq-w996-akh4
17
vulnerability VCID-q6h3-j4b9-4kfg
18
vulnerability VCID-rb6e-p5hw-kfa6
19
vulnerability VCID-s6ny-5vqq-uqg7
20
vulnerability VCID-t2vh-fkgc-tba9
21
vulnerability VCID-vxsm-fcuq-y7e8
22
vulnerability VCID-w8dy-4cvu-ckcm
23
vulnerability VCID-ym3c-dbhb-e3fs
24
vulnerability VCID-yybg-erer-jfaw
25
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.9.1
aliases CVE-2024-25126, GHSA-22f2-v57c-j9cx
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wvjz-yynu-qbbf
39
url VCID-ym3c-dbhb-e3fs
vulnerability_id VCID-ym3c-dbhb-e3fs
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-46727.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-46727.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-46727
reference_id
reference_type
scores
0
value 0.00808
scoring_system epss
scoring_elements 0.74714
published_at 2026-06-12T12:55:00Z
1
value 0.00808
scoring_system epss
scoring_elements 0.74643
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-46727
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46727
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46727
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-46727.yml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-46727.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-46727
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-46727
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104927
reference_id 1104927
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104927
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2364966
reference_id 2364966
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2364966
9
reference_url https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712
reference_id 2bb5263b464b65ba4b648996a579dbd180d2b712
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T14:00:33Z/
url https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712
10
reference_url https://github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3
reference_id 3f5a4249118d09d199fe480466c8c6717e43b6e3
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T14:00:33Z/
url https://github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3
11
reference_url https://github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74
reference_id cd6b70a1f2a1016b73dc906f924869f4902c2d74
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T14:00:33Z/
url https://github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74
12
reference_url https://github.com/advisories/GHSA-gjh7-p2fx-99vx
reference_id GHSA-gjh7-p2fx-99vx
reference_type
scores
url https://github.com/advisories/GHSA-gjh7-p2fx-99vx
13
reference_url https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx
reference_id GHSA-gjh7-p2fx-99vx
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-08T14:00:33Z/
url https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx
14
reference_url https://access.redhat.com/errata/RHSA-2025:7604
reference_id RHSA-2025:7604
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:7604
15
reference_url https://access.redhat.com/errata/RHSA-2025:7605
reference_id RHSA-2025:7605
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:7605
16
reference_url https://access.redhat.com/errata/RHSA-2025:8254
reference_id RHSA-2025:8254
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8254
17
reference_url https://access.redhat.com/errata/RHSA-2025:8256
reference_id RHSA-2025:8256
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8256
18
reference_url https://access.redhat.com/errata/RHSA-2025:8279
reference_id RHSA-2025:8279
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8279
19
reference_url https://access.redhat.com/errata/RHSA-2025:8288
reference_id RHSA-2025:8288
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8288
20
reference_url https://access.redhat.com/errata/RHSA-2025:8289
reference_id RHSA-2025:8289
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8289
21
reference_url https://access.redhat.com/errata/RHSA-2025:8290
reference_id RHSA-2025:8290
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8290
22
reference_url https://access.redhat.com/errata/RHSA-2025:8291
reference_id RHSA-2025:8291
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8291
23
reference_url https://access.redhat.com/errata/RHSA-2025:8319
reference_id RHSA-2025:8319
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8319
24
reference_url https://access.redhat.com/errata/RHSA-2025:8322
reference_id RHSA-2025:8322
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8322
25
reference_url https://access.redhat.com/errata/RHSA-2025:8323
reference_id RHSA-2025:8323
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8323
26
reference_url https://access.redhat.com/errata/RHSA-2025:9838
reference_id RHSA-2025:9838
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:9838
27
reference_url https://usn.ubuntu.com/7507-1/
reference_id USN-7507-1
reference_type
scores
url https://usn.ubuntu.com/7507-1/
fixed_packages
0
url pkg:gem/rack@2.2.14
purl pkg:gem/rack@2.2.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-eduz-d41z-ekfw
7
vulnerability VCID-fcfm-c4dz-v3es
8
vulnerability VCID-gjjy-a7wb-qqaa
9
vulnerability VCID-gsss-za6y-c7hk
10
vulnerability VCID-guej-7tq7-fbb7
11
vulnerability VCID-mqhf-duvt-7yfk
12
vulnerability VCID-nd2m-v3wz-xfhw
13
vulnerability VCID-nejs-mnc1-syc5
14
vulnerability VCID-nesq-w996-akh4
15
vulnerability VCID-q6h3-j4b9-4kfg
16
vulnerability VCID-rb6e-p5hw-kfa6
17
vulnerability VCID-s6ny-5vqq-uqg7
18
vulnerability VCID-t2vh-fkgc-tba9
19
vulnerability VCID-vxsm-fcuq-y7e8
20
vulnerability VCID-ym3c-dbhb-e3fs
21
vulnerability VCID-yybg-erer-jfaw
22
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.14
1
url pkg:gem/rack@3.0.16
purl pkg:gem/rack@3.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-eduz-d41z-ekfw
7
vulnerability VCID-fcfm-c4dz-v3es
8
vulnerability VCID-gjjy-a7wb-qqaa
9
vulnerability VCID-gsss-za6y-c7hk
10
vulnerability VCID-guej-7tq7-fbb7
11
vulnerability VCID-mqhf-duvt-7yfk
12
vulnerability VCID-nd2m-v3wz-xfhw
13
vulnerability VCID-nesq-w996-akh4
14
vulnerability VCID-q6h3-j4b9-4kfg
15
vulnerability VCID-rb6e-p5hw-kfa6
16
vulnerability VCID-s6ny-5vqq-uqg7
17
vulnerability VCID-t2vh-fkgc-tba9
18
vulnerability VCID-vxsm-fcuq-y7e8
19
vulnerability VCID-ym3c-dbhb-e3fs
20
vulnerability VCID-yybg-erer-jfaw
21
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.16
2
url pkg:gem/rack@3.1.14
purl pkg:gem/rack@3.1.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-abcn-y96c-dfe3
6
vulnerability VCID-eduz-d41z-ekfw
7
vulnerability VCID-fcfm-c4dz-v3es
8
vulnerability VCID-gjjy-a7wb-qqaa
9
vulnerability VCID-gsss-za6y-c7hk
10
vulnerability VCID-guej-7tq7-fbb7
11
vulnerability VCID-mqhf-duvt-7yfk
12
vulnerability VCID-nd2m-v3wz-xfhw
13
vulnerability VCID-nesq-w996-akh4
14
vulnerability VCID-q6h3-j4b9-4kfg
15
vulnerability VCID-rb6e-p5hw-kfa6
16
vulnerability VCID-s6ny-5vqq-uqg7
17
vulnerability VCID-t2vh-fkgc-tba9
18
vulnerability VCID-vxsm-fcuq-y7e8
19
vulnerability VCID-ym3c-dbhb-e3fs
20
vulnerability VCID-yybg-erer-jfaw
21
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.14
aliases CVE-2025-46727, GHSA-gjh7-p2fx-99vx
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ym3c-dbhb-e3fs
40
url VCID-yse4-vy3c-xfea
vulnerability_id VCID-yse4-vy3c-xfea
summary 
Multiple vulnerabilities have been found in Rack, the worst of
    which allow execution of arbitrary code.
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html
1
reference_url http://rack.github.com/
reference_id
reference_type
scores
url http://rack.github.com/
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0262.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0262.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-0262
reference_id
reference_type
scores
0
value 0.01263
scoring_system epss
scoring_elements 0.79851
published_at 2026-06-11T12:55:00Z
1
value 0.01263
scoring_system epss
scoring_elements 0.79915
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-0262
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=909071
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=909071
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=909072
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=909072
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0262
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0262
7
reference_url https://gist.github.com/rentzsch/4736940
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://gist.github.com/rentzsch/4736940
8
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
9
reference_url https://github.com/rack/rack/blob/master/lib/rack/file.rb#L56
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/blob/master/lib/rack/file.rb#L56
10
reference_url https://github.com/rack/rack/commit/6f237e4c9fab649d3750482514f0fde76c56ab30
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/commit/6f237e4c9fab649d3750482514f0fde76c56ab30
11
reference_url https://groups.google.com/forum/#!msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ
12
reference_url https://groups.google.com/forum/#!msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700173
reference_id 700173
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700173
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-0262
reference_id CVE-2013-0262
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-0262
15
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2013-0262.yml
reference_id CVE-2013-0262.YML
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2013-0262.yml
16
reference_url https://github.com/advisories/GHSA-85r7-w5mv-c849
reference_id GHSA-85r7-w5mv-c849
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-85r7-w5mv-c849
17
reference_url https://security.gentoo.org/glsa/201405-10
reference_id GLSA-201405-10
reference_type
scores
url https://security.gentoo.org/glsa/201405-10
fixed_packages
0
url pkg:gem/rack@1.4.5
purl pkg:gem/rack@1.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-hnvx-fk27-9keb
19
vulnerability VCID-mkxe-9gpy-ebdp
20
vulnerability VCID-mqhf-duvt-7yfk
21
vulnerability VCID-nd2m-v3wz-xfhw
22
vulnerability VCID-nejs-mnc1-syc5
23
vulnerability VCID-nesq-w996-akh4
24
vulnerability VCID-q6h3-j4b9-4kfg
25
vulnerability VCID-rb6e-p5hw-kfa6
26
vulnerability VCID-rube-m1vm-d7hd
27
vulnerability VCID-s6ny-5vqq-uqg7
28
vulnerability VCID-t2vh-fkgc-tba9
29
vulnerability VCID-unav-qy3e-2bd5
30
vulnerability VCID-venj-nk2m-pkd2
31
vulnerability VCID-vxsm-fcuq-y7e8
32
vulnerability VCID-w8dy-4cvu-ckcm
33
vulnerability VCID-wvjz-yynu-qbbf
34
vulnerability VCID-ym3c-dbhb-e3fs
35
vulnerability VCID-ytrg-5hh7-7qcq
36
vulnerability VCID-yybg-erer-jfaw
37
vulnerability VCID-zmuu-6s9z-cqd2
38
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.4.5
1
url pkg:gem/rack@1.5.0.beta.1
purl pkg:gem/rack@1.5.0.beta.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3kfb-z5dw-hkfv
3
vulnerability VCID-3srh-99bk-ruft
4
vulnerability VCID-5a6b-yemd-mqgb
5
vulnerability VCID-7m5s-fgj3-v3c5
6
vulnerability VCID-7t6e-rm2b-s7a1
7
vulnerability VCID-8fp2-gkct-2fcu
8
vulnerability VCID-9h1q-9jzw-1bdk
9
vulnerability VCID-abcn-y96c-dfe3
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-rube-m1vm-d7hd
28
vulnerability VCID-s6ny-5vqq-uqg7
29
vulnerability VCID-t2vh-fkgc-tba9
30
vulnerability VCID-u393-uzrh-4bea
31
vulnerability VCID-unav-qy3e-2bd5
32
vulnerability VCID-venj-nk2m-pkd2
33
vulnerability VCID-vxsm-fcuq-y7e8
34
vulnerability VCID-w8dy-4cvu-ckcm
35
vulnerability VCID-wvjz-yynu-qbbf
36
vulnerability VCID-ym3c-dbhb-e3fs
37
vulnerability VCID-yse4-vy3c-xfea
38
vulnerability VCID-ytrg-5hh7-7qcq
39
vulnerability VCID-yybg-erer-jfaw
40
vulnerability VCID-zmuu-6s9z-cqd2
41
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.5.0.beta.1
2
url pkg:gem/rack@1.5.2
purl pkg:gem/rack@1.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-rube-m1vm-d7hd
28
vulnerability VCID-s6ny-5vqq-uqg7
29
vulnerability VCID-t2vh-fkgc-tba9
30
vulnerability VCID-unav-qy3e-2bd5
31
vulnerability VCID-venj-nk2m-pkd2
32
vulnerability VCID-vxsm-fcuq-y7e8
33
vulnerability VCID-w8dy-4cvu-ckcm
34
vulnerability VCID-wvjz-yynu-qbbf
35
vulnerability VCID-ym3c-dbhb-e3fs
36
vulnerability VCID-ytrg-5hh7-7qcq
37
vulnerability VCID-yybg-erer-jfaw
38
vulnerability VCID-zmuu-6s9z-cqd2
39
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@1.5.2
aliases CVE-2013-0262, GHSA-85r7-w5mv-c849, OSV-89938
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yse4-vy3c-xfea
41
url VCID-ytrg-5hh7-7qcq
vulnerability_id VCID-ytrg-5hh7-7qcq
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8161.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8161.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8161
reference_id
reference_type
scores
0
value 0.00907
scoring_system epss
scoring_elements 0.76296
published_at 2026-06-12T12:55:00Z
1
value 0.00907
scoring_system epss
scoring_elements 0.76225
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8161
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8161
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8161
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rack/rack/commit/dddb7ad18ed79ca6ab06ccc417a169fde451246e
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack/commit/dddb7ad18ed79ca6ab06ccc417a169fde451246e
6
reference_url https://groups.google.com/forum/#!topic/ruby-security-ann/T4ZIsfRf2eA
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3
scoring_elements
1
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://groups.google.com/forum/#!topic/ruby-security-ann/T4ZIsfRf2eA
7
reference_url https://groups.google.com/g/rubyonrails-security/c/IOO1vNZTzPA
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://groups.google.com/g/rubyonrails-security/c/IOO1vNZTzPA
8
reference_url https://lists.debian.org/debian-lts-announce/2020/07/msg00006.html
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/07/msg00006.html
9
reference_url https://lists.debian.org/debian-lts-announce/2023/01/msg00038.html
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2023/01/msg00038.html
10
reference_url https://usn.ubuntu.com/4561-1
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4561-1
11
reference_url https://usn.ubuntu.com/4561-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4561-1/
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1838281
reference_id 1838281
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1838281
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-8161
reference_id CVE-2020-8161
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-8161
14
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2020-8161.yml
reference_id CVE-2020-8161.YML
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2020-8161.yml
15
reference_url https://github.com/advisories/GHSA-5f9h-9pjv-v6j7
reference_id GHSA-5f9h-9pjv-v6j7
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5f9h-9pjv-v6j7
16
reference_url https://access.redhat.com/errata/RHSA-2020:4366
reference_id RHSA-2020:4366
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4366
17
reference_url https://usn.ubuntu.com/4561-2/
reference_id USN-4561-2
reference_type
scores
url https://usn.ubuntu.com/4561-2/
fixed_packages
0
url pkg:gem/rack@2.1.3
purl pkg:gem/rack@2.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-s6ny-5vqq-uqg7
28
vulnerability VCID-t2vh-fkgc-tba9
29
vulnerability VCID-unav-qy3e-2bd5
30
vulnerability VCID-vxsm-fcuq-y7e8
31
vulnerability VCID-w8dy-4cvu-ckcm
32
vulnerability VCID-wvjz-yynu-qbbf
33
vulnerability VCID-ym3c-dbhb-e3fs
34
vulnerability VCID-ytrg-5hh7-7qcq
35
vulnerability VCID-yybg-erer-jfaw
36
vulnerability VCID-zmuu-6s9z-cqd2
37
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.1.3
1
url pkg:gem/rack@2.2.0
purl pkg:gem/rack@2.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-au1a-twy1-sqfn
10
vulnerability VCID-dfww-bthd-m3c5
11
vulnerability VCID-dzcy-yd29-x3fm
12
vulnerability VCID-e9ps-payd-abeu
13
vulnerability VCID-eduz-d41z-ekfw
14
vulnerability VCID-etn1-jujr-dkfu
15
vulnerability VCID-fcfm-c4dz-v3es
16
vulnerability VCID-gjjy-a7wb-qqaa
17
vulnerability VCID-gsss-za6y-c7hk
18
vulnerability VCID-guej-7tq7-fbb7
19
vulnerability VCID-hnvx-fk27-9keb
20
vulnerability VCID-mkxe-9gpy-ebdp
21
vulnerability VCID-mqhf-duvt-7yfk
22
vulnerability VCID-nd2m-v3wz-xfhw
23
vulnerability VCID-nejs-mnc1-syc5
24
vulnerability VCID-nesq-w996-akh4
25
vulnerability VCID-q6h3-j4b9-4kfg
26
vulnerability VCID-rb6e-p5hw-kfa6
27
vulnerability VCID-s6ny-5vqq-uqg7
28
vulnerability VCID-t2vh-fkgc-tba9
29
vulnerability VCID-unav-qy3e-2bd5
30
vulnerability VCID-vxsm-fcuq-y7e8
31
vulnerability VCID-w8dy-4cvu-ckcm
32
vulnerability VCID-wvjz-yynu-qbbf
33
vulnerability VCID-ym3c-dbhb-e3fs
34
vulnerability VCID-yybg-erer-jfaw
35
vulnerability VCID-zmuu-6s9z-cqd2
36
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.0
aliases CVE-2020-8161, GHSA-5f9h-9pjv-v6j7
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ytrg-5hh7-7qcq
42
url VCID-yybg-erer-jfaw
vulnerability_id VCID-yybg-erer-jfaw
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34831.json
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34831.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34831
reference_id
reference_type
scores
0
value 0.00043
scoring_system epss
scoring_elements 0.13705
published_at 2026-06-11T12:55:00Z
1
value 0.00043
scoring_system epss
scoring_elements 0.13822
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34831
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34831
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34831
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34831.yml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-34831.yml
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-34831
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-34831
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2454504
reference_id 2454504
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2454504
8
reference_url https://github.com/advisories/GHSA-q2ww-5357-x388
reference_id GHSA-q2ww-5357-x388
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q2ww-5357-x388
9
reference_url https://github.com/rack/rack/security/advisories/GHSA-q2ww-5357-x388
reference_id GHSA-q2ww-5357-x388
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-03T17:43:52Z/
url https://github.com/rack/rack/security/advisories/GHSA-q2ww-5357-x388
10
reference_url https://usn.ubuntu.com/8182-1/
reference_id USN-8182-1
reference_type
scores
url https://usn.ubuntu.com/8182-1/
fixed_packages
0
url pkg:gem/rack@2.2.23
purl pkg:gem/rack@2.2.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.23
1
url pkg:gem/rack@3.1.21
purl pkg:gem/rack@3.1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.21
2
url pkg:gem/rack@3.2.6
purl pkg:gem/rack@3.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-abcn-y96c-dfe3
3
vulnerability VCID-eduz-d41z-ekfw
4
vulnerability VCID-gjjy-a7wb-qqaa
5
vulnerability VCID-gsss-za6y-c7hk
6
vulnerability VCID-mqhf-duvt-7yfk
7
vulnerability VCID-nd2m-v3wz-xfhw
8
vulnerability VCID-nesq-w996-akh4
9
vulnerability VCID-rb6e-p5hw-kfa6
10
vulnerability VCID-t2vh-fkgc-tba9
11
vulnerability VCID-vxsm-fcuq-y7e8
12
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.6
aliases CVE-2026-34831, GHSA-q2ww-5357-x388
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yybg-erer-jfaw
43
url VCID-zmuu-6s9z-cqd2
vulnerability_id VCID-zmuu-6s9z-cqd2
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-26141.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-26141.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-26141
reference_id
reference_type
scores
0
value 0.0041
scoring_system epss
scoring_elements 0.61877
published_at 2026-06-12T12:55:00Z
1
value 0.0041
scoring_system epss
scoring_elements 0.61777
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-26141
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25126
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25126
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26141
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26146
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1064516
reference_id 1064516
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1064516
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2265594
reference_id 2265594
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2265594
9
reference_url https://github.com/rack/rack/commit/4849132bef471adb21131980df745f4bb84de2d9
reference_id 4849132bef471adb21131980df745f4bb84de2d9
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-05T18:23:59Z/
url https://github.com/rack/rack/commit/4849132bef471adb21131980df745f4bb84de2d9
10
reference_url https://github.com/rack/rack/commit/62457686b26d33a15a254c7768c2076e8e02b48b
reference_id 62457686b26d33a15a254c7768c2076e8e02b48b
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-05T18:23:59Z/
url https://github.com/rack/rack/commit/62457686b26d33a15a254c7768c2076e8e02b48b
11
reference_url https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944
reference_id 84944
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-05T18:23:59Z/
url https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-26141
reference_id CVE-2024-26141
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-26141
13
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26141.yml
reference_id CVE-2024-26141.yml
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-05T18:23:59Z/
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26141.yml
14
reference_url https://github.com/advisories/GHSA-xj5v-6v4g-jfw6
reference_id GHSA-xj5v-6v4g-jfw6
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xj5v-6v4g-jfw6
15
reference_url https://github.com/rack/rack/security/advisories/GHSA-xj5v-6v4g-jfw6
reference_id GHSA-xj5v-6v4g-jfw6
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-05T18:23:59Z/
url https://github.com/rack/rack/security/advisories/GHSA-xj5v-6v4g-jfw6
16
reference_url https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html
reference_id msg00022.html
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-05T18:23:59Z/
url https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html
17
reference_url https://security.netapp.com/advisory/ntap-20240510-0007/
reference_id ntap-20240510-0007
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-03-05T18:23:59Z/
url https://security.netapp.com/advisory/ntap-20240510-0007/
18
reference_url https://access.redhat.com/errata/RHSA-2024:10806
reference_id RHSA-2024:10806
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:10806
19
reference_url https://access.redhat.com/errata/RHSA-2024:1841
reference_id RHSA-2024:1841
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1841
20
reference_url https://access.redhat.com/errata/RHSA-2024:1846
reference_id RHSA-2024:1846
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:1846
21
reference_url https://access.redhat.com/errata/RHSA-2024:2007
reference_id RHSA-2024:2007
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2007
22
reference_url https://access.redhat.com/errata/RHSA-2024:2113
reference_id RHSA-2024:2113
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2113
23
reference_url https://access.redhat.com/errata/RHSA-2024:2581
reference_id RHSA-2024:2581
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2581
24
reference_url https://access.redhat.com/errata/RHSA-2024:2584
reference_id RHSA-2024:2584
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2584
25
reference_url https://access.redhat.com/errata/RHSA-2024:2953
reference_id RHSA-2024:2953
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2953
26
reference_url https://access.redhat.com/errata/RHSA-2024:3431
reference_id RHSA-2024:3431
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:3431
27
reference_url https://usn.ubuntu.com/6689-1/
reference_id USN-6689-1
reference_type
scores
url https://usn.ubuntu.com/6689-1/
28
reference_url https://usn.ubuntu.com/6837-1/
reference_id USN-6837-1
reference_type
scores
url https://usn.ubuntu.com/6837-1/
29
reference_url https://usn.ubuntu.com/6837-2/
reference_id USN-6837-2
reference_type
scores
url https://usn.ubuntu.com/6837-2/
30
reference_url https://usn.ubuntu.com/7036-1/
reference_id USN-7036-1
reference_type
scores
url https://usn.ubuntu.com/7036-1/
fixed_packages
0
url pkg:gem/rack@2.2.8.1
purl pkg:gem/rack@2.2.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-9h1q-9jzw-1bdk
6
vulnerability VCID-abcn-y96c-dfe3
7
vulnerability VCID-e9ps-payd-abeu
8
vulnerability VCID-eduz-d41z-ekfw
9
vulnerability VCID-fcfm-c4dz-v3es
10
vulnerability VCID-gjjy-a7wb-qqaa
11
vulnerability VCID-gsss-za6y-c7hk
12
vulnerability VCID-guej-7tq7-fbb7
13
vulnerability VCID-mkxe-9gpy-ebdp
14
vulnerability VCID-mqhf-duvt-7yfk
15
vulnerability VCID-nd2m-v3wz-xfhw
16
vulnerability VCID-nejs-mnc1-syc5
17
vulnerability VCID-nesq-w996-akh4
18
vulnerability VCID-q6h3-j4b9-4kfg
19
vulnerability VCID-rb6e-p5hw-kfa6
20
vulnerability VCID-s6ny-5vqq-uqg7
21
vulnerability VCID-t2vh-fkgc-tba9
22
vulnerability VCID-unav-qy3e-2bd5
23
vulnerability VCID-vxsm-fcuq-y7e8
24
vulnerability VCID-w8dy-4cvu-ckcm
25
vulnerability VCID-ym3c-dbhb-e3fs
26
vulnerability VCID-yybg-erer-jfaw
27
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.8.1
1
url pkg:gem/rack@3.0.9.1
purl pkg:gem/rack@3.0.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7t6e-rm2b-s7a1
5
vulnerability VCID-9h1q-9jzw-1bdk
6
vulnerability VCID-abcn-y96c-dfe3
7
vulnerability VCID-e9ps-payd-abeu
8
vulnerability VCID-eduz-d41z-ekfw
9
vulnerability VCID-fcfm-c4dz-v3es
10
vulnerability VCID-gjjy-a7wb-qqaa
11
vulnerability VCID-gsss-za6y-c7hk
12
vulnerability VCID-guej-7tq7-fbb7
13
vulnerability VCID-mkxe-9gpy-ebdp
14
vulnerability VCID-mqhf-duvt-7yfk
15
vulnerability VCID-nd2m-v3wz-xfhw
16
vulnerability VCID-nesq-w996-akh4
17
vulnerability VCID-q6h3-j4b9-4kfg
18
vulnerability VCID-rb6e-p5hw-kfa6
19
vulnerability VCID-s6ny-5vqq-uqg7
20
vulnerability VCID-t2vh-fkgc-tba9
21
vulnerability VCID-vxsm-fcuq-y7e8
22
vulnerability VCID-w8dy-4cvu-ckcm
23
vulnerability VCID-ym3c-dbhb-e3fs
24
vulnerability VCID-yybg-erer-jfaw
25
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.9.1
aliases CVE-2024-26141, GHSA-xj5v-6v4g-jfw6
risk_score 2.6
exploitability 0.5
weighted_severity 5.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zmuu-6s9z-cqd2
44
url VCID-zv9m-9yhe-5uab
vulnerability_id VCID-zv9m-9yhe-5uab
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61770.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61770.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-61770
reference_id
reference_type
scores
0
value 0.00266
scoring_system epss
scoring_elements 0.50356
published_at 2026-06-11T12:55:00Z
1
value 0.00291
scoring_system epss
scoring_elements 0.5303
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-61770
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61770
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61770
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/rack/rack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rack/rack
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1117627
reference_id 1117627
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1117627
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2402174
reference_id 2402174
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2402174
7
reference_url https://github.com/rack/rack/commit/589127f4ac8b5cf11cf88fb0cd116ffed4d2181e
reference_id 589127f4ac8b5cf11cf88fb0cd116ffed4d2181e
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-07T15:23:07Z/
url https://github.com/rack/rack/commit/589127f4ac8b5cf11cf88fb0cd116ffed4d2181e
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-61770
reference_id CVE-2025-61770
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-61770
9
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-61770.yml
reference_id CVE-2025-61770.YML
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-61770.yml
10
reference_url https://github.com/rack/rack/commit/d869fed663b113b95a74ad53e1b5cae6ab31f29e
reference_id d869fed663b113b95a74ad53e1b5cae6ab31f29e
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-07T15:23:07Z/
url https://github.com/rack/rack/commit/d869fed663b113b95a74ad53e1b5cae6ab31f29e
11
reference_url https://github.com/rack/rack/commit/e08f78c656c9394d6737c022bde087e0f33336fd
reference_id e08f78c656c9394d6737c022bde087e0f33336fd
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-07T15:23:07Z/
url https://github.com/rack/rack/commit/e08f78c656c9394d6737c022bde087e0f33336fd
12
reference_url https://github.com/advisories/GHSA-p543-xpfm-54cp
reference_id GHSA-p543-xpfm-54cp
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p543-xpfm-54cp
13
reference_url https://github.com/rack/rack/security/advisories/GHSA-p543-xpfm-54cp
reference_id GHSA-p543-xpfm-54cp
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-10-07T15:23:07Z/
url https://github.com/rack/rack/security/advisories/GHSA-p543-xpfm-54cp
14
reference_url https://access.redhat.com/errata/RHSA-2025:19512
reference_id RHSA-2025:19512
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19512
15
reference_url https://access.redhat.com/errata/RHSA-2025:19513
reference_id RHSA-2025:19513
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19513
16
reference_url https://access.redhat.com/errata/RHSA-2025:19647
reference_id RHSA-2025:19647
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19647
17
reference_url https://access.redhat.com/errata/RHSA-2025:19719
reference_id RHSA-2025:19719
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19719
18
reference_url https://access.redhat.com/errata/RHSA-2025:19733
reference_id RHSA-2025:19733
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19733
19
reference_url https://access.redhat.com/errata/RHSA-2025:19734
reference_id RHSA-2025:19734
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19734
20
reference_url https://access.redhat.com/errata/RHSA-2025:19736
reference_id RHSA-2025:19736
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19736
21
reference_url https://access.redhat.com/errata/RHSA-2025:19800
reference_id RHSA-2025:19800
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19800
22
reference_url https://access.redhat.com/errata/RHSA-2025:19948
reference_id RHSA-2025:19948
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19948
23
reference_url https://access.redhat.com/errata/RHSA-2025:20962
reference_id RHSA-2025:20962
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:20962
24
reference_url https://access.redhat.com/errata/RHSA-2025:21036
reference_id RHSA-2025:21036
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:21036
25
reference_url https://access.redhat.com/errata/RHSA-2025:21696
reference_id RHSA-2025:21696
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:21696
26
reference_url https://usn.ubuntu.com/7960-1/
reference_id USN-7960-1
reference_type
scores
url https://usn.ubuntu.com/7960-1/
fixed_packages
0
url pkg:gem/rack@2.2.19
purl pkg:gem/rack@2.2.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-q6h3-j4b9-4kfg
12
vulnerability VCID-rb6e-p5hw-kfa6
13
vulnerability VCID-s6ny-5vqq-uqg7
14
vulnerability VCID-t2vh-fkgc-tba9
15
vulnerability VCID-vxsm-fcuq-y7e8
16
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@2.2.19
1
url pkg:gem/rack@3.0.0.beta1
purl pkg:gem/rack@3.0.0.beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-34sm-19kr-1uby
2
vulnerability VCID-3srh-99bk-ruft
3
vulnerability VCID-5a6b-yemd-mqgb
4
vulnerability VCID-7m5s-fgj3-v3c5
5
vulnerability VCID-7t6e-rm2b-s7a1
6
vulnerability VCID-8fp2-gkct-2fcu
7
vulnerability VCID-9h1q-9jzw-1bdk
8
vulnerability VCID-abcn-y96c-dfe3
9
vulnerability VCID-dfww-bthd-m3c5
10
vulnerability VCID-dzcy-yd29-x3fm
11
vulnerability VCID-e9ps-payd-abeu
12
vulnerability VCID-eduz-d41z-ekfw
13
vulnerability VCID-etn1-jujr-dkfu
14
vulnerability VCID-fcfm-c4dz-v3es
15
vulnerability VCID-gjjy-a7wb-qqaa
16
vulnerability VCID-gsss-za6y-c7hk
17
vulnerability VCID-guej-7tq7-fbb7
18
vulnerability VCID-mkxe-9gpy-ebdp
19
vulnerability VCID-mqhf-duvt-7yfk
20
vulnerability VCID-nd2m-v3wz-xfhw
21
vulnerability VCID-nesq-w996-akh4
22
vulnerability VCID-q6h3-j4b9-4kfg
23
vulnerability VCID-rb6e-p5hw-kfa6
24
vulnerability VCID-s6ny-5vqq-uqg7
25
vulnerability VCID-t2vh-fkgc-tba9
26
vulnerability VCID-vxsm-fcuq-y7e8
27
vulnerability VCID-w8dy-4cvu-ckcm
28
vulnerability VCID-wvjz-yynu-qbbf
29
vulnerability VCID-ym3c-dbhb-e3fs
30
vulnerability VCID-yybg-erer-jfaw
31
vulnerability VCID-zmuu-6s9z-cqd2
32
vulnerability VCID-zv9m-9yhe-5uab
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.0.0.beta1
2
url pkg:gem/rack@3.1.17
purl pkg:gem/rack@3.1.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-q6h3-j4b9-4kfg
12
vulnerability VCID-rb6e-p5hw-kfa6
13
vulnerability VCID-s6ny-5vqq-uqg7
14
vulnerability VCID-t2vh-fkgc-tba9
15
vulnerability VCID-vxsm-fcuq-y7e8
16
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.1.17
3
url pkg:gem/rack@3.2.2
purl pkg:gem/rack@3.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-22eh-9wun-h7b5
1
vulnerability VCID-3srh-99bk-ruft
2
vulnerability VCID-5a6b-yemd-mqgb
3
vulnerability VCID-abcn-y96c-dfe3
4
vulnerability VCID-eduz-d41z-ekfw
5
vulnerability VCID-gjjy-a7wb-qqaa
6
vulnerability VCID-gsss-za6y-c7hk
7
vulnerability VCID-guej-7tq7-fbb7
8
vulnerability VCID-mqhf-duvt-7yfk
9
vulnerability VCID-nd2m-v3wz-xfhw
10
vulnerability VCID-nesq-w996-akh4
11
vulnerability VCID-q6h3-j4b9-4kfg
12
vulnerability VCID-rb6e-p5hw-kfa6
13
vulnerability VCID-s6ny-5vqq-uqg7
14
vulnerability VCID-t2vh-fkgc-tba9
15
vulnerability VCID-vxsm-fcuq-y7e8
16
vulnerability VCID-yybg-erer-jfaw
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/rack@3.2.2
aliases CVE-2025-61770, GHSA-p543-xpfm-54cp
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zv9m-9yhe-5uab
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:gem/rack@1.3.2