Rack Uncontrolled Resource Consumption DoS

The vulnerability of the modular interface between web servers and Rack web applications is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Rack Unauthenticated Access

The vulnerability of the Ruby-based Rack web server’s modular interface is related to partial comparison. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Rack Modular Interface DoS

The vulnerability of the Ruby-based Rack web server’s modular interface is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Rack Modular Interface Bypass

The vulnerability of the Ruby-based Rack web server’s modular interface is related to improper behavior. Exploiting this vulnerability allows a remote attacker to bypass existing security mechanisms...

Rack Modular Interface Buffer Overflow

The vulnerability of the Ruby-based Rack web server’s modular interface is related to improper handling of parameter length discrepancies. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

Rack Modular Interface Bypass

The vulnerability of the Ruby-based Rack web server’s modular interface is related to the occurrence of interpretation conflicts when processing HTTP headers’ names and values. Exploiting this vulnerability allows a remote attacker to bypass security restrictions...

CVE-2026-34786

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Staticapplicablerules evaluates several headerrules types against the raw URL-encoded PATHINFO, while the underlying file-serving path is decoded before the file is served. As a result, a request for a...

CVE-2026-34785

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Static determines whether a request should be served as a static file using a simple string prefix check. When configured with URL prefixes such as "/css", it matches any request path that begins with...

Rack Request POST DoS

The vulnerability in the Rack::RequestPOST class of the modular interface between web servers and Rack web applications involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Rack Parsing Component DoS

The vulnerability of the parsing component of the modular interface between web servers and web applications in Rack relates to the allocation of unlimited memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Rack Modular Interface DoS

The vulnerability of the modular interface between web servers and web applications in Rack is related to insufficient validation of data entered by users during the analysis of complex POST requests. Exploiting this vulnerability allows a malicious actor to execute a DoS attack using a specially...