CVE-2025-46727

🗓️ 07 May 2025 23:07:40Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 259 Views

Rack vulnerability allows excessive parameters in requests, leading to denial of service due to resource exhaustion.

Reporter	Title	Published	Views	Family All 174
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	25 Jun 202513:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Faspex is affected by open-source related vulnerabilities and unauthorized actions from authenticated users	29 Jul 202522:45	–	ibm
Tenable Nessus	Amazon Linux 2 : pcs (ALAS-2025-2856)	29 May 202500:00	–	nessus
Tenable Nessus	Debian dla-4357 : ruby-rack - security update	2 Nov 202500:00	–	nessus
Tenable Nessus	Fedora 43 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2025-203b7db566)	16 Jul 202500:00	–	nessus
Tenable Nessus	Fedora 41 : rubygem-rack (2025-a35addbf9b)	12 Nov 202500:00	–	nessus
Tenable Nessus	Fedora 42 : rubygem-rack (2025-eae2126736)	12 Nov 202500:00	–	nessus
Tenable Nessus	MiracleLinux 8 : pcs-0.10.18-2.el8_10.5.ML.1 (AXSA:2025-10529:04)	13 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 9 : pcs-0.11.9-2.el9_6.1.ML.1 (AXSA:2025-10558:05)	13 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 8 : pcs (ELSA-2025-8254)	29 May 202500:00	–	nessus

NVD

Vulners

Node

rack rackRange<2.2.14ruby

rack rackRange3.0.0–3.0.16-ruby

rack rackRange3.1.0–3.1.14-ruby

[
  {
    "vendor": "rack",
    "product": "rack",
    "versions": [
      {
        "version": "< 2.2.14",
        "status": "affected"
      },
      {
        "version": ">= 3.0, < 3.0.16",
        "status": "affected"
      },
      {
        "version": ">= 3.1, < 3.1.14",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712
github	www.github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx
github	www.github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3
github	www.github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74

17 Jun 2026 09:26Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.00911

SSVC