Astra Linux – vulnerability in ruby-rack

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser only wrapped the request body in a BoundedIO when a Content-Length header was present. When a multipart/form-data request is sent without a Content-Length header—such as in HTTP chunk...