{"action":"Upgrade rack to 2.2.14 or later.","affected":[{"fixed":"2.2.14","introduced":"0"}],"component":"rack","cve_ids":["CVE-2025-32441"],"ecosystem":"RubyGems","epss":0.00284,"exploited":false,"fixed_versions":["2.2.14"],"ghsa_id":"GHSA-vpfw-47h7-xj4g","id":"tcs_01M5KENKZH8X4X37BZNT2A0YJY","modified_at":"2026-09-10T03:50:24.733775036Z","published_at":"2025-05-08T14:45:18Z","references":["https://osv.dev/vulnerability/GHSA-vpfw-47h7-xj4g","https://github.com/rack/rack-session/security/advisories/GHSA-9j94-67jr-4cqj","https://github.com/rack/rack/security/advisories/GHSA-vpfw-47h7-xj4g","https://nvd.nist.gov/vuln/detail/CVE-2025-32441","https://github.com/rack/rack/commit/c48e52f7c57e99e1e1bf54c8760d4f082cd1c89d","https://github.com/rack/rack","https://github.com/rack/rack/blob/v2.2.13/lib/rack/session/abstract/id.rb#L263-L270","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-32441.yml"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-vpfw-47h7-xj4g","url":"https://osv.dev/vulnerability/GHSA-vpfw-47h7-xj4g"}],"summary":"Rack session gets restored after deletion"}