CVE-2025-61919 Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing

Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, Rack::RequestPOST reads the entire request body into memory for Content-Type: application/x-www-form-urlencoded, calling rack.input.readnil without enforcing a length or cap. Large request bodies can therefo...

PT-2025-41595

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.20 Rack versions prior to 3.1.18 Rack versions prior to 3.2.3 Description Rack is a modular Ruby web server interface. In versions prior to 2.2.20, 3.1.18, and 3.2.3, the Rack::RequestPOST method reads the entire...

EUVD-2009-4410

Malware in sbrugna...

EUVD-2005-1235

Malware in sbrugna...

EUVD-2002-1042

Malware in sbrugna...

EUVD-2014-6338

Malware in sbrugna...

EUVD-1999-0470

Malware in sbrugna...

EUVD-2018-19297

Malware in sbrugna...

EUVD-2002-0771

Malware in sbrugna...

EUVD-2007-6426

Malware in sbrugna...

EUVD-2015-2037

Malware in sbrugna...

EUVD-2007-5253

Malware in sbrugna...

EUVD-2009-4409

Malware in sbrugna...

EUVD-2005-1124

Malware in sbrugna...

EUVD-2012-3308

Malware in sbrugna...

EUVD-2009-2054

Malware in sbrugna...

EUVD-2009-2066

Malware in sbrugna...

EUVD-2009-2056

Malware in sbrugna...

EUVD-2008-0063

Malware in sbrugna...

EUVD-2002-1153

Malware in sbrugna...