CVE-2024-35231
1 advisory.
RubyGems/rack-contrib CVE-2024-35231: high 8.6, EPSS 0.67%
rack-contrib vulnerable to Denial of Service due to the unconstrained value of the incoming "profiler_runs" parameter
Action: Upgrade rack-contrib to 2.5.0 or later.
bundle update rack-contribAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.0 | - |
Fixed versions
| 2.5.0 |
Sources
- osv: GHSA-8c8q-2xw3-j869
- https://github.com/rack/rack-contrib/security/advisories/GHSA-8c8q-2xw3-j869
- https://nvd.nist.gov/vuln/detail/CVE-2024-35231
- https://github.com/rack/rack-contrib/commit/0eec2a9836329051c6742549e65a94a4c24fe6f7
- https://github.com/rack/rack-contrib
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack-contrib/CVE-2024-35231.yml
CVE-2024-35231 · published · modified · JSON