https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:10:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01347 bdu:2021-01347 https://cve.radiocsirt.org/vuln/bdu:2021-01347 https://cve.radiocsirt.org/vuln/brew-mailcatcher-cve-2020-8161 <p><strong>Affected:</strong> Homebrew: mailcatcher</p> <p>A directory traversal vulnerability exists in rack &lt; 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.</p> <p><strong>Affected:</strong> Homebrew: mailcatcher</p> <p>A directory traversal vulnerability exists in rack &lt; 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.</p> https://cve.radiocsirt.org/vuln/brew-mailcatcher-cve-2020-8161 https://cve.radiocsirt.org/vuln/cnvd-2020-29732 cnvd-2020-29732 https://cve.radiocsirt.org/vuln/cnvd-2020-29732 https://cve.radiocsirt.org/vuln/euvd-2026-38275 EUVD-2026-38275 https://cve.radiocsirt.org/vuln/euvd-2026-38275 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8161 <p>A directory traversal vulnerability exists in rack &lt; 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.</p> <p>A directory traversal vulnerability exists in rack &lt; 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-8161 https://cve.radiocsirt.org/vuln/ghsa-5f9h-9pjv-v6j7 <p><strong>Affected:</strong> RubyGems: rack</p> <p>A directory traversal vulnerability exists in rack &lt; 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.</p> <p><strong>Affected:</strong> RubyGems: rack</p> <p>A directory traversal vulnerability exists in rack &lt; 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.</p> https://cve.radiocsirt.org/vuln/ghsa-5f9h-9pjv-v6j7 https://cve.radiocsirt.org/vuln/gsd-2020-8161 gsd-2020-8161 https://cve.radiocsirt.org/vuln/gsd-2020-8161 https://cve.radiocsirt.org/vuln/rhsa-2020:4366 <p>mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018) puppet-agent: Puppet Agent does not properly verify SSL connection when downloading a CRL rack-protection: Timing attack in authenticity_token.rb hibernate-validator: safeHTML validator allows XSS Django: Incorrect HTTP detection with reverse-proxy connecting via HTTPS rubygem-rack: hijack sessions by using timing attacks targeting the session id rubygem-secure_headers: limited header injection when using dynamic overrides with user input rubygem-secure_headers: directive injection when using dynamic overrides with user input rubygem-actionview: views that use the `j` or `escape_javascript` methods are susceptible to XSS attacks netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling rubygem-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser puppet: Arbitrary catalog retrieval puppet: puppet server and puppetDB may leak sensitive information via metrics API rubygem-rack: directory traversal in Rack::Directory rubygem-rack: percent-encoded cookies can be used to overwrite existing prefixed cookie names jackson-databind: Lacks certain xbean-reflect/JNDI blocking jackson-databind: Serialization gadgets in shaded-hikari-config jackson-databind: Serialization gadgets in ibatis-sqlmap jackson-databind: Serialization gadgets in anteros-core hibernate-validator: Improper input validation in the interpolation of constraint error messages jackson-databind: Ser…</p> <p>mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018) puppet-agent: Puppet Agent does not properly verify SSL connection when downloading a CRL rack-protection: Timing attack in authenticity_token.rb hibernate-validator: safeHTML validator allows XSS Django: Incorrect HTTP detection with reverse-proxy connecting via HTTPS rubygem-rack: hijack sessions by using timing attacks targeting the session id rubygem-secure_headers: limited header injection when using dynamic overrides with user input rubygem-secure_headers: directive injection when using dynamic overrides with user input rubygem-actionview: views that use the `j` or `escape_javascript` methods are susceptible to XSS attacks netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling rubygem-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser puppet: Arbitrary catalog retrieval puppet: puppet server and puppetDB may leak sensitive information via metrics API rubygem-rack: directory traversal in Rack::Directory rubygem-rack: percent-encoded cookies can be used to overwrite existing prefixed cookie names jackson-databind: Lacks certain xbean-reflect/JNDI blocking jackson-databind: Serialization gadgets in shaded-hikari-config jackson-databind: Serialization gadgets in ibatis-sqlmap jackson-databind: Serialization gadgets in anteros-core hibernate-validator: Improper input validation in the interpolation of constraint error messages jackson-databind: Ser…</p> https://cve.radiocsirt.org/vuln/rhsa-2020:4366 https://cve.radiocsirt.org/vuln/suse-su-2020:2678-1 <p>Security update for rubygem-rack</p> <p>Security update for rubygem-rack</p> https://cve.radiocsirt.org/vuln/suse-su-2020:2678-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8161 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-rack, Ubuntu:18.04:LTS: ruby-rack, Ubuntu:20.04:LTS: ruby-rack</p> <p>A directory traversal vulnerability exists in rack &lt; 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-rack, Ubuntu:18.04:LTS: ruby-rack, Ubuntu:20.04:LTS: ruby-rack</p> <p>A directory traversal vulnerability exists in rack &lt; 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8161