https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:40:38.331940+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-travis-cve-2011-5036 BREW-travis-CVE-2011-5036 — Rack Gem Subject to Denial of Service via Hash Collisions 2026-10-03T09:40:38.423631+00:00

Affected: Homebrew: travis

Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

 https://cve.radiocsirt.org/vuln/euvd-2026-117145 EUVD-2026-117145 2026-10-03T09:40:38.423704+00:00 EUVD-2026-117145 https://cve.radiocsirt.org/vuln/fkie_cve-2011-5036 fkie_cve-2011-5036 2026-10-03T09:40:38.423734+00:00

Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

 https://cve.radiocsirt.org/vuln/ghsa-v6j3-7jrw-hq2p GHSA-v6j3-7jrw-hq2p — Rack Gem Subject to Denial of Service via Hash Collisions 2026-10-03T09:40:38.423782+00:00

Affected: RubyGems: rack, Maven: org.jruby:jruby-parent

Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

 https://cve.radiocsirt.org/vuln/gsd-2011-5036 gsd-2011-5036 2026-10-03T09:40:38.423827+00:00 gsd-2011-5036