CVE-2026-39324

CVE-2026-39324 Exploit PoC Rack::Session::Cookie decrypt failure falls back to accepting unencrypted cookies | ---|--- Advisory| GHSA-33qg-7wpp-89cq Package| rack-session RubyGems Affected| = 2.1.1 Patched| 2.1.2 Summary Rack::Session::Cookie with secrets: should only accept encrypted cookies. Bu...