CVE-2024-47220

RubyGems/webrick CVE-2024-47220: high 7.5

HTTP Request Smuggling in ruby webrick

Action: Upgrade webrick to 1.8.2 or later.

bundle update webrick

Affected

Fixed versions

Sources

• osv: GHSA-6f62-3596-g6w7
• https://nvd.nist.gov/vuln/detail/CVE-2024-47220
• https://github.com/ruby/webrick/issues/145
• https://github.com/ruby/webrick/issues/145#issuecomment-2369994610
• https://github.com/ruby/webrick/issues/145#issuecomment-2372838285
• https://github.com/ruby/webrick/pull/146/commits/d88321da45dcd230ac2b4585cad4833d6d5e8841
• https://github.com/ruby/webrick/commit/f5faca9222541591e1a7c3c97552ebb0c92733c7
• https://github.com/ruby/webrick
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/webrick/CVE-2024-47220.yml

CVE-2024-47220 · published 2024-09-22T03:30:30Z · modified 2026-09-10T03:50:18.821555207Z · JSON