rack rack-session vulnerabilities

2 published CVEs name rack rack-session among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 1
Critical: 1
Known exploited: 0

Critical 1High 0Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

20251
20261

Newest CVEs

CVE-2026-39324
Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization
rack · rack-session
Critical9.3
CVE-2025-46336
Rack session gets restored after deletion
rack · rack-session
Medium4.2

Most common weaknesses