Debian/ruby-rack: medium 6.5

Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.10, Rack::CommonLogger can be exploited by crafting input that includes newline characters

Action: Upgrade ruby-rack to 2.2.13-1~deb12u1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2025-25184
• https://security-tracker.debian.org/tracker/CVE-2025-25184

published 2025-02-12T17:15:24Z · modified 2026-09-01T20:05:44.688124440Z · JSON