Known Vulnerabilities for Http.rb by Http.rb Project

Listed below are 1 of the newest known vulnerabilities associated with "Http.rb" by "Http.rb Project".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE	Shortened Description	Severity	Publish Date	Last Modified
CVE-2026-65602 json	Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTC...	Not Provided	2026-07-22	2026-07-22
CVE-2026-65596 json	n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credent...	Not Provided	2026-07-22	2026-07-22
CVE-2026-65593 json	n8n versions before 1.123.64 contain a server-side request forgery vulnerability in the dynamic-node-parameters endpoints tha...	Not Provided	2026-07-22	2026-07-22
CVE-2026-65589 json	n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing pla...	Not Provided	2026-07-22	2026-07-22
CVE-2026-65318 json	Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthe...	Not Provided	2026-07-21	2026-07-22
CVE-2026-65317 json	Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middlewa...	Not Provided	2026-07-21	2026-07-21
CVE-2026-65057 json	Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the ...	Not Provided	2026-07-21	2026-07-22
CVE-2026-65012 json	InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scan_folder ...	Not Provided	2026-07-22	2026-07-22
CVE-2026-64821 json	djangoSIGE through 1.10 (commit a6fe7e8) contains a cross-site request forgery vulnerability that allows unauthenticated atta...	Not Provided	2026-07-21	2026-07-22
CVE-2026-63771 json	Adminer before 5.4.3 contains a cookie injection vulnerability that allows attackers to manipulate cookie attributes by injec...	Not Provided	2026-07-20	2026-07-20

Results limited to 10 most recent vulnerabilities

Known Affected Configurations (CPE V2.3)

Type	Vendor	Product	Version
Application	Http.rb Project	Http.rb	5.0.0
Application	Http.rb Project	Http.rb	4.1.1
Application	Http.rb Project	Http.rb	4.1.0
Application	Http.rb Project	Http.rb	4.0.5
Application	Http.rb Project	Http.rb	4.0.4
Application	Http.rb Project	Http.rb	4.0.3
Application	Http.rb Project	Http.rb	4.0.2
Application	Http.rb Project	Http.rb	4.0.1
Application	Http.rb Project	Http.rb	4.0.0
Application	Http.rb Project	Http.rb	3.3.0
Application	Http.rb Project	Http.rb	3.2.1
Application	Http.rb Project	Http.rb	3.2.0
Application	Http.rb Project	Http.rb	3.1.0
Application	Http.rb Project	Http.rb	3.0.0
Application	Http.rb Project	Http.rb	3.0.0
Application	Http.rb Project	Http.rb	2.2.2
Application	Http.rb Project	Http.rb	2.2.1
Application	Http.rb Project	Http.rb	2.2.0
Application	Http.rb Project	Http.rb	2.1.0
Application	Http.rb Project	Http.rb	2.0.3

Results limited to 20 most recent known configurations