RubyGems/rack CVE-2025-49007: medium 5.3, EPSS 0.58%
ReDoS Vulnerability in Rack::Multipart handle_mime_head
Action: Upgrade rack to 3.1.16 or later.
bundle update rackAffected
| introduced | fixed | last affected |
|---|---|---|
| 3.1.0 | 3.1.16 | - |
Fixed versions
| 3.1.16 |
Sources
- osv: GHSA-47m2-26rw-j2jw
- nvd: CVE-2025-49007
- https://github.com/rack/rack/security/advisories/GHSA-47m2-26rw-j2jw
- https://github.com/rack/rack/commit/4795831a0a310c2d31102749e551b38faab6401f
- https://github.com/rack/rack/commit/aed514df37e33907df3c971ed3ca9a0a20ac2901
- https://github.com/rack/rack
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-49007.yml
CVE-2025-49007 · published · modified · JSON