{"action":"Upgrade rack to 2.1.3 or later.","affected":[{"fixed":"2.1.3","introduced":"0"}],"component":"rack","cve_ids":["CVE-2020-8161"],"ecosystem":"RubyGems","epss":0.03359,"exploited":false,"fixed_versions":["2.1.3"],"ghsa_id":"GHSA-5f9h-9pjv-v6j7","id":"tcs_01M5KEH07SADRAWNT4PSF3FZ3S","modified_at":"2026-09-10T03:48:48.075561980Z","published_at":"2020-07-06T21:31:02Z","references":["https://osv.dev/vulnerability/GHSA-5f9h-9pjv-v6j7","https://nvd.nist.gov/vuln/detail/CVE-2020-8161","https://github.com/rack/rack/commit/dddb7ad18ed79ca6ab06ccc417a169fde451246e","https://github.com/rack/rack","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2020-8161.yml","https://groups.google.com/forum/#!topic/ruby-security-ann/T4ZIsfRf2eA","https://groups.google.com/g/rubyonrails-security/c/IOO1vNZTzPA","https://lists.debian.org/debian-lts-announce/2020/07/msg00006.html","https://lists.debian.org/debian-lts-announce/2023/01/msg00038.html","https://usn.ubuntu.com/4561-1"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-5f9h-9pjv-v6j7","url":"https://osv.dev/vulnerability/GHSA-5f9h-9pjv-v6j7"}],"summary":"Directory traversal in Rack::Directory app bundled with Rack"}