| Package | Affected versions | Patched versions |
|---|---|---|
| rack | ≥ 2.2.0, < 2.2.3< 2.1.4 | 2.2.32.1.4 |
| rack | ≥ 2.2.0, < 2.2.3< 2.1.4 | 2.2.32.1.4 |
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it possible for an attacker to forge a secure or host-only cookie prefix.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free