Action Pack: Possible DoS vulnerability in Action Controller Live streaming

Impact ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is full, the push blocks, and Bufferabort, which runs when the client disconnects or a write times ou...

GHSA-RWVH-FW6R-PWVP Action Pack: Possible DoS vulnerability in Action Controller Live streaming

Impact ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is full, the push blocks, and Bufferabort, which runs when the client disconnects or a write times ou...

CVE-2026-126072

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is ful...

CVE-2026-126072

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is ful...

CVE-2026-126072: rails: Action Pack is a framework for handling and responding to web requests

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is ful...