tocsin

Debian/ruby-rack: medium 6.5

Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.10, Rack::CommonLogger can be exploited by crafting input that includes newline characters

Action: Upgrade ruby-rack to 3.1.12-1 or later.

Affected

introducedfixedlast affected
03.1.12-1-

Fixed versions

3.1.12-1

Sources

published · modified · JSON