{"action":"Upgrade rack-session to 2.1.1 or later.","affected":[{"fixed":"2.1.1","introduced":"2.0.0"}],"component":"rack-session","cve_ids":["CVE-2025-46336"],"ecosystem":"RubyGems","epss":0.00332,"exploited":false,"fixed_versions":["2.1.1"],"ghsa_id":"GHSA-9j94-67jr-4cqj","id":"tcs_01M5KEJDVVXM9Y7ZYCEHMRE0WD","modified_at":"2026-09-10T03:50:57.454921252Z","published_at":"2025-05-08T14:45:33Z","references":["https://osv.dev/vulnerability/GHSA-9j94-67jr-4cqj","https://github.com/rack/rack-session/security/advisories/GHSA-9j94-67jr-4cqj","https://github.com/rack/rack/security/advisories/GHSA-vpfw-47h7-xj4g","https://nvd.nist.gov/vuln/detail/CVE-2025-46336","https://github.com/rack/rack-session/commit/c28c4a8c1861d814e09f2ae48264ac4c40be2d3b","https://github.com/rack/rack-session","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack-session/CVE-2025-46336.yml"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-9j94-67jr-4cqj","url":"https://osv.dev/vulnerability/GHSA-9j94-67jr-4cqj"}],"summary":"Rack session gets restored after deletion"}