Search for packages
| purl | pkg:gem/rack-protection@1.1.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-8een-7pcz-tbgr
Aliases: CVE-2018-7212 GHSA-h29f-7f56-j8wh |
Path traversal on Windows Path traversal is possible via backslash characters on Windows. An attacker could access arbitrary files and directories stored on the file system. |
Affected by 1 other vulnerability. |
|
VCID-shhv-mc1k-bqez
Aliases: CVE-2018-1000119 GHSA-688c-3x49-6rqj |
Timing attack vulnerability Sinatra rack-protection contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-31T10:16:45.479442+00:00 | Ruby Importer | Affected by | VCID-8een-7pcz-tbgr | https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack-protection/CVE-2018-7212.yml | 38.6.0 |
| 2026-05-31T09:43:35.271983+00:00 | GitLab Importer | Affected by | VCID-shhv-mc1k-bqez | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/rack-protection/CVE-2018-1000119.yml | 38.6.0 |
| 2026-05-31T09:43:18.785560+00:00 | GitLab Importer | Affected by | VCID-8een-7pcz-tbgr | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/rack-protection/CVE-2018-7212.yml | 38.6.0 |