Rack has a Directory Traversal via Rack:Directory

🗓️ 17 Feb 2026 00:00:00Reported by RubySecType

Rack::Directory may expose directories outside the root due to weak path checks; update Rack.

Reporter	Title	Published	Views	Family All 71
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been addressed in IBM Aspera Shares	27 Mar 202615:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affects IBM License Metric Tool v9	26 Mar 202611:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	6 Mar 202620:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Console	12 Mar 202620:43	–	ibm
AstraLinux	Astra Linux – Vulnerability in Ruby-Rack	24 Jun 202615:11	–	astralinux
BDU FSTEC	The vulnerability of the modular interface between web servers and Rack web applications, related to incorrect path name restrictions for the restricted access catalog, allows attackers to gain unauthorized access to protected information.	25 May 202600:00	–	bdu_fstec
Chainguard	CVE-2026-22860 vulnerabilities	20 Feb 202601:17	–	cgr
Circl	CVE-2026-22860	18 Feb 202619:25	–	circl
CNNVD	Rack 安全漏洞	18 Feb 202600:00	–	cnnvd
CVE	CVE-2026-22860	18 Feb 202618:45	–	cve