Debian/ruby-rack: unknown
Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attac
Action: Upgrade ruby-rack to 1.4.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.0-1 | - |
Fixed versions
| 1.4.0-1 |
Sources
published · modified · JSON