CVE-2026-34829

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser only wraps the request body in a BoundedIO when CONTENTLENGTH is present. When a multipart/form-data request is sent without a Content-Length header, such as with HTTP chunked transfe...

Composer Security Vulnerabilities

composer is a software application . Provides a declaration, management and installation of dependencies for PHP projects. A security vulnerability exists in Composer versions prior to 2.2.23 and prior to 2.7.0, which stems from the presence of an arbitrary code execution vulnerability. An attack...