Regular Expression Denial Of Service (ReDoS)

rack is vulnerable to Regular Expression Denial Of Service (ReDoS). The vulnerability exists because the parse_http_accept_header function in request.rb does not properly sanitize the header due to an insecure REGEX pattern, which may allow an attacker to cause an application crash by parsing a maliciously crafted header.