https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:35:01 +0000 https://cve.radiocsirt.org/vuln/certfr-2021-avi-115 certfr-2021-avi-115 https://cve.radiocsirt.org/vuln/certfr-2021-avi-115 https://cve.radiocsirt.org/vuln/euvd-2026-23193 EUVD-2026-23193 https://cve.radiocsirt.org/vuln/euvd-2026-23193 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22881 <p>The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain &#34;allowed host&#34; formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website.</p> <p>The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain &#34;allowed host&#34; formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-22881 https://cve.radiocsirt.org/vuln/ghsa-8877-prq4-9xfw <p><strong>Affected:</strong> RubyGems: actionpack</p> <p>The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain &#34;allowed host&#34; formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.</p> <p><strong>Affected:</strong> RubyGems: actionpack</p> <p>The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain &#34;allowed host&#34; formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.</p> https://cve.radiocsirt.org/vuln/ghsa-8877-prq4-9xfw https://cve.radiocsirt.org/vuln/gsd-2021-22881 gsd-2021-22881 https://cve.radiocsirt.org/vuln/gsd-2021-22881 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11318-1 <p>ruby2.7-rubygem-actionpack-6.0-6.0.4-1.2 on GA media</p> <p>ruby2.7-rubygem-actionpack-6.0-6.0.4-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11318-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-22881 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails, Ubuntu:24.04:LTS: rails, Ubuntu:25.10: rails, Ubuntu:26.04:LTS: rails</p> <p>The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain &#34;allowed host&#34; formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails, Ubuntu:24.04:LTS: rails, Ubuntu:25.10: rails, Ubuntu:26.04:LTS: rails</p> <p>The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain &#34;allowed host&#34; formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-22881