Debian/ruby-sinatra: medium 5.4
Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect
Action: Upgrade ruby-sinatra to 4.1.1-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.1-2 | - |
Fixed versions
| 4.1.1-2 |
Sources
- osv: DEBIAN-CVE-2024-21510#Debian:13/ruby-sinatra
- https://security-tracker.debian.org/tracker/CVE-2024-21510
published · modified · JSON