Known Vulnerabilities for products from Rack
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Rack".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126083 json | Not Provided | 2026-11-10 | 2026-11-10 | |
| CVE-2026-126073 json | Not Provided | 2026-11-10 | 2026-11-10 | |
| CVE-2026-125109 json | Not Provided | 2026-11-09 | 2026-11-10 | |
| CVE-2026-115982 json | Not Provided | 2026-10-24 | 2026-10-29 | |
| CVE-2026-111683 json | Not Provided | 2026-10-16 | 2026-10-23 | |
| CVE-2026-101307 json | Not Provided | 2026-10-15 | 2026-11-09 | |
| CVE-2026-63183 json | Not Provided | 2026-11-04 | 2026-11-05 | |
| CVE-2026-62864 json | Not Provided | 2026-10-30 | 2026-11-02 | |
| CVE-2026-54918 json | Not Provided | 2026-09-17 | 2026-09-24 | |
| CVE-2026-49422 json | Not Provided | 2026-08-19 | 2026-08-20 | |
| CVE-2026-39324 json | Rack::Session is a session management implementation for Rack. From 2.0.0 to before 2.1.2, Rack::Session::Cookie incorrectly ... | Not Provided | 2026-04-07 | 2026-10-26 |
| CVE-2026-34835 json | Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Req... | Not Provided | 2026-04-02 | 2026-07-24 |
| CVE-2026-34831 json | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Files#fail sets the Content-L... | Not Provided | 2026-04-02 | 2026-07-24 |
| CVE-2026-34830 json | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Sendfile#map_accel_path inter... | Not Provided | 2026-04-02 | 2026-07-24 |
| CVE-2026-34829 json | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser only wraps ... | Not Provided | 2026-04-02 | 2026-07-24 |
| CVE-2026-34827 json | Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Mul... | Not Provided | 2026-04-02 | 2026-07-24 |
| CVE-2026-34826 json | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.get_byte_ranges parses ... | Not Provided | 2026-04-02 | 2026-07-24 |
| CVE-2026-34786 json | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Static#applicable_rules evalu... | Not Provided | 2026-04-02 | 2026-07-24 |
| CVE-2026-34785 json | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Static determines whether a r... | Not Provided | 2026-04-02 | 2026-07-24 |
| CVE-2026-34763 json | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Directory interpolates the co... | Not Provided | 2026-04-02 | 2026-07-24 |