Debian/ruby-rack: medium 6.1
There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the s
Action: Upgrade ruby-rack to 1.6.4-6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.4-6 | - |
Fixed versions
| 1.6.4-6 |
Sources
- osv: DEBIAN-CVE-2018-16471#Debian:14/ruby-rack
- https://security-tracker.debian.org/tracker/CVE-2018-16471
published · modified · JSON