Regular Expression Denial Of Service (ReDoS)

rack is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists in getfilename function of parser.rb due to inefficient regular expression complexity which allows an attacker to crash the application by submitting a malicious input with a RFC2183-multipart-boundary stri...