Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/rack@2.2.3
purl pkg:gem/rack@2.2.3
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-y4e1-mh3x-gkep Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it possible for an attacker to forge a secure or host-only cookie prefix. CVE-2020-8184
GHSA-j6w9-fv6q-3q52

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-29T14:23:45.861666+00:00 GHSA Importer Fixing VCID-y4e1-mh3x-gkep https://github.com/advisories/GHSA-j6w9-fv6q-3q52 38.6.0
2026-05-29T09:11:35.669003+00:00 GithubOSV Importer Fixing VCID-y4e1-mh3x-gkep https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/06/GHSA-j6w9-fv6q-3q52/GHSA-j6w9-fv6q-3q52.json 38.6.0