CVE-2026-126076

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent...

DEBIAN-CVE-2026-126076

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent...

CVE-2026-126076

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent...

Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore

Impact ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent request destroys the session, through resetsession on logout or by deleting its cache entry on t...

CVE-2026-126076

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent...

CVE-2026-126076

The Action Pack framework (prior to versions 8.1.4.1 and 8.0.5.2 ) is vulnerable to a session restoration issue in ActionDispatch::Session::CacheStore . The component fails to verify if a session's cache entry still exists before writing it back at the end of a request. If a concurrent request de...

EUVD-2026-122925

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent...

CVE-2026-126076 Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent...

CVE-2026-126076 Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent...

EUVD-2026-122859

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, Action Pack session stores other than ActionDispatch::Session::CookieStore CacheStore, MemCacheStore, and third-party stores built on AbstractStore, AbstractSecureStore or the session mixins writ...

CVE-2026-126076: rails: Action Pack is a framework for handling and responding to web requests

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent...

PT-2026-144731

Name of the Vulnerable Software and Affected Versions Action Pack versions prior to 8.1.4.1 Action Pack versions prior to 8.0.5.2 Description Action Pack is a framework for handling and responding to web requests. A flaw exists in ActionDispatch::Session::CacheStore where the session is written...

PT-2026-144722

Name of the Vulnerable Software and Affected Versions Action Pack versions prior to 8.1.4.1 Action Pack versions prior to 8.0.5.2 Description Session stores other than ActionDispatch::Session::CookieStore including CacheStore, MemCacheStore, and third-party stores based on AbstractStore,...

org.infinispan:infinispan-distribution (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-docs (>=15.0.0.dev01, <=15.0.0.dev06) +9 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-remote (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-remote MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source advisory:...

org.infinispan:infinispan-cachestore-jdbc (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-cachestore-sql (>=15.0.0.dev01, <=15.0.0.dev06) +10 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc-common (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-jdbc-common MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source...

org.infinispan:infinispan-distribution (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-javadoc-all (>=15.0.0.dev01, <=15.0.0.dev06) +7 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-sql MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source advisory: OSV:GHSA-GG57-587F-H5V6...

org.infinispan:infinispan-distribution (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-docs (>=15.0.0.dev01, <=15.0.0.dev06) +8 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-jdbc MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source advisory: GHSA-GG57-587F-H5V6...

org.infinispan:infinispan-distribution (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-javadoc-all (>=15.0.0.dev01, <=15.0.0.dev06) +7 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-sql MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source advisory: GHSA-GG57-587F-H5V6...

org.infinispan:infinispan-distribution (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-docs (>=15.0.0.dev01, <=15.0.0.dev06) +8 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-jdbc MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source advisory: OSV:GHSA-GG57-587F-H5V6...

org.infinispan:infinispan-cachestore-jdbc (>=15.0.0.dev01, <=15.0.0.dev06), org.infinispan:infinispan-cachestore-sql (>=15.0.0.dev01, <=15.0.0.dev06) +10 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc-common (>=15.0.0.dev01, <=15.0.0.dev06)

org.infinispan:infinispan-cachestore-jdbc-common MAVEN version =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev01, =15.0.0.dev06 Source cves: CVE-2023-5384 Source...