{"action":"Upgrade io.ratpack:ratpack-core to 1.9.0 or later.","affected":[{"fixed":"1.9.0","introduced":"0"}],"component":"io.ratpack:ratpack-core","cve_ids":["CVE-2021-29479"],"ecosystem":"Maven","epss":0.00857,"exploited":false,"fixed_versions":["1.9.0"],"ghsa_id":"GHSA-w6rq-6h34-vh7q","id":"tcs_01M5N9FRQ991VAYCWB2DXNT6G5","modified_at":"2026-07-08T06:29:24.395736755Z","published_at":"2021-07-01T17:02:38Z","references":["https://osv.dev/vulnerability/GHSA-w6rq-6h34-vh7q","https://github.com/ratpack/ratpack/security/advisories/GHSA-w6rq-6h34-vh7q","https://nvd.nist.gov/vuln/detail/CVE-2021-29479","https://github.com/ratpack/ratpack","https://portswigger.net/web-security/web-cache-poisoning"],"severity":{"label":"high","score":7},"sources":[{"source":"osv","source_id":"GHSA-w6rq-6h34-vh7q","url":"https://osv.dev/vulnerability/GHSA-w6rq-6h34-vh7q"}],"summary":"Cached redirect poisoning via X-Forwarded-Host header"}