https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 08:26:47 +0000 https://cve.radiocsirt.org/vuln/cve-2021-22903 <p><strong>Affected:</strong> https://github.com/rails/rails</p> <p>The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability. Specially crafted Host headers in combination with certain &#34;allowed host&#34; formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. This is similar to CVE-2021-22881. Strings in config.hosts that do not have a leading dot are converted to regular expressions without proper escaping. This causes, for example, `config.hosts &lt;&lt; &#34;sub.example.com&#34;` to permit a request with a Host header value of `sub-example.com`.</p> <p><strong>Affected:</strong> https://github.com/rails/rails</p> <p>The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability. Specially crafted Host headers in combination with certain &#34;allowed host&#34; formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. This is similar to CVE-2021-22881. Strings in config.hosts that do not have a leading dot are converted to regular expressions without proper escaping. This causes, for example, `config.hosts &lt;&lt; &#34;sub.example.com&#34;` to permit a request with a Host header value of `sub-example.com`.</p> https://cve.radiocsirt.org/vuln/cve-2021-22903