{"action":"Upgrade rack to 1.1.3 (1.1.x), 1.2.5 (1.2.x) or 1.3.6 (1.3.x) or later.","affected":[{"fixed":"1.1.3","introduced":"0"},{"fixed":"1.2.5","introduced":"1.2.0"},{"fixed":"1.3.6","introduced":"1.3.0"}],"component":"rack","cve_ids":["CVE-2011-5036"],"ecosystem":"RubyGems","epss":0.03871,"exploited":false,"fixed_versions":["1.1.3","1.2.5","1.3.6"],"ghsa_id":"GHSA-v6j3-7jrw-hq2p","id":"tcs_01M5KENFNB69XQYACDCC87C05A","modified_at":"2024-11-30T05:29:12.044806Z","published_at":"2022-05-17T04:59:13Z","references":["https://osv.dev/vulnerability/GHSA-v6j3-7jrw-hq2p","https://nvd.nist.gov/vuln/detail/CVE-2011-5036","https://gist.github.com/52bbc6b9cc19ce330829","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2011-5036.yml","https://web.archive.org/web/20120201040317/http://jruby.org/2011/12/27/jruby-1-6-5-1","https://web.archive.org/web/20130213132312/http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html","http://www.debian.org/security/2013/dsa-2783","http://www.kb.cert.org/vuls/id/903934","http://www.nruns.com/_downloads/advisory28122011.pdf","http://www.ocert.org/advisories/ocert-2011-003.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-v6j3-7jrw-hq2p","url":"https://osv.dev/vulnerability/GHSA-v6j3-7jrw-hq2p"}],"summary":"Rack Gem Subject to Denial of Service via Hash Collisions"}