Rack vulnerabilities

CVEs per yearBy the year they were published

1. 20182
2. 20191
3. 20245
4. 202513
5. 202616

Newest CVEs

• CVE-2026-39324

  Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization

  rack · rack-session

  Critical9.3
• CVE-2026-26962

  Rack: Header injection in multipart requests

  rack · rack

  Medium4.8
• CVE-2026-34835

  Rack: `Rack::Request` accepts invalid Host characters, enabling host allowlist bypass.

  rack · rack

  Medium4.8
• CVE-2026-34827

  Rack: Algorithmic-Complexity DoS in Rack::Multipart::Parser

  rack · rack

  High7.5
• CVE-2026-32762

  Rack: Forwarded Header semicolon injection enables Host and Scheme spoofing

  rack · rack

  Medium4.8
• CVE-2026-34830

  Rack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginx

  rack · rack

  Medium5.9
• CVE-2026-34829

  Rack: Denial of Service via Unbounded Multipart File Upload Without Content-Length

  rack · rack

  High7.5
• CVE-2026-34826

  Rack: Unbounded Range Count in get_byte_ranges Enables DoS

  rack · rack

  Medium5.3
• CVE-2026-34786

  Rack: Rack::Static header_rules bypass via URL-encoded paths

  rack · rack

  Medium5.3
• CVE-2026-34785

  Rack: Local file inclusion in `Rack::Static` via URL Prefix Matching

  rack · rack

  High7.5