rack vulnerabilities

CVEs whose affected-version data names the rack package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-22860High· 7.5

7mo ago

Rack is a modular Ruby web server interface

Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory`’s path check used a string prefix match on the expanded path. A request like `/../root_example/` can escape the configured root i…

▾ Twilightrack · rackEPSS 0.68%via NVD