https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:16:44.636496+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-travis-cve-2012-6109 BREW-travis-CVE-2012-6109 — Rack vulnerable to REDoS 2026-10-03T00:16:44.849536+00:00

Affected: Homebrew: travis

`lib/rack/multipart.rb` in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.

 https://cve.radiocsirt.org/vuln/euvd-2026-113442 EUVD-2026-113442 2026-10-03T00:16:44.849592+00:00 EUVD-2026-113442 https://cve.radiocsirt.org/vuln/fkie_cve-2012-6109 fkie_cve-2012-6109 2026-10-03T00:16:44.849608+00:00

lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.

 https://cve.radiocsirt.org/vuln/ghsa-h77x-m5q8-c29h GHSA-h77x-m5q8-c29h — Rack vulnerable to REDoS 2026-10-03T00:16:44.849632+00:00

Affected: RubyGems: rack

`lib/rack/multipart.rb` in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.

 https://cve.radiocsirt.org/vuln/gsd-2012-6109 gsd-2012-6109 2026-10-03T00:16:44.849656+00:00 gsd-2012-6109 https://cve.radiocsirt.org/vuln/rhsa-2013:0544 RHSA-2013:0544 — Red Hat Security Advisory: Subscription Asset Manager 1.2 update 2026-10-03T00:16:44.849675+00:00

Katello: /etc/katello/secure/passphrase is world readable Katello: lack of authorization in proxies_controller.rb rubygem-rack: parsing Content-Disposition header DoS rubygem-ruby_parser: incorrect temporary file usage rubygem-rack: receiving excessively long lines triggers out-of-memory error rubygem-rack: Rack::Auth:: AbstractRequest DoS

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-6109 UBUNTU-CVE-2012-6109 2026-10-03T00:16:44.849736+00:00

Affected: Ubuntu:14.04:LTS: ruby-rack

lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.