CVE-2025-46727

🗓️ 07 May 2025 23:15:54Reported by [email protected]Type

Vulnerability in Rack QueryParser allows denial of service via excessive parameters in requests.

Reporter	Title	Published	Views	Family All 174
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	25 Jun 202513:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Faspex is affected by open-source related vulnerabilities and unauthorized actions from authenticated users	29 Jul 202522:45	–	ibm
Tenable Nessus	Amazon Linux 2 : pcs (ALAS-2025-2856)	29 May 202500:00	–	nessus
Tenable Nessus	Debian dla-4357 : ruby-rack - security update	2 Nov 202500:00	–	nessus
Tenable Nessus	Fedora 43 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2025-203b7db566)	16 Jul 202500:00	–	nessus
Tenable Nessus	Fedora 41 : rubygem-rack (2025-a35addbf9b)	12 Nov 202500:00	–	nessus
Tenable Nessus	Fedora 42 : rubygem-rack (2025-eae2126736)	12 Nov 202500:00	–	nessus
Tenable Nessus	MiracleLinux 8 : pcs-0.10.18-2.el8_10.5.ML.1 (AXSA:2025-10529:04)	13 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 9 : pcs-0.11.9-2.el9_6.1.ML.1 (AXSA:2025-10558:05)	13 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 8 : pcs (ELSA-2025-8254)	29 May 202500:00	–	nessus

NVD

Node

rack rackRange<2.2.14ruby

rack rackRange3.0.0–3.0.16-ruby

rack rackRange3.1.0–3.1.14-ruby

Source	Link
github	www.github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712
github	www.github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3
github	www.github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74
github	www.github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx

17 Jun 2026 09:26Current

CVSS 3.17.5

EPSS0.00911