| Package | Affected versions | Patched versions |
|---|---|---|
| rack | ≥ 1.1.0, < 1.1.5≥ 1.2.0, < 1.2.7≥ 1.3.0, < 1.3.9≥ 1.4.0, < 1.4.4 | 1.1.51.2.71.3.91.4.4 |
| rack | = 1.1.0= 1.1.2= 1.1.3= 1.1.4= 1.2.0= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.2.6= 1.3.0= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 1.3.6= 1.3.7= 1.3.8= 1.4.0= 1.4.1= 1.4.2= 1.4.3 |
Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to "symbolized arbitrary strings."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free