Debian/ruby-rack: high 7.5
A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an attacker tocraft input that can cause RFC2183 multipart bound
Action: Upgrade ruby-rack to 2.2.4-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.4-3 | - |
Fixed versions
| 2.2.4-3 |
Sources
- osv: DEBIAN-CVE-2022-44572#Debian:14/ruby-rack
- https://security-tracker.debian.org/tracker/CVE-2022-44572
published · modified · JSON