CVE-2024-21510

RubyGems/sinatra CVE-2024-21510: medium 5.4

Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision

Action: Upgrade sinatra to 4.1.0 or later.

bundle update sinatra

Affected

Fixed versions

Sources

• osv: GHSA-hxx2-7vcw-mqr3
• https://nvd.nist.gov/vuln/detail/CVE-2024-21510
• https://github.com/sinatra/sinatra/pull/2010
• https://github.com/advisories/GHSA-hxx2-7vcw-mqr3
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sinatra/CVE-2024-21510.yml
• https://github.com/sinatra/sinatra
• https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb#L319
• https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb#L323C1-L343C17
• https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md#410--2024-11-18
• https://security.snyk.io/vuln/SNYK-RUBY-SINATRA-6483832

CVE-2024-21510 · published 2024-11-01T06:30:34Z · modified 2026-09-10T03:50:20.789353543Z · JSON