Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-34835 |
|
Vulnerability in rack (CVE-2026-34835)
vulnerability in rack (CVE-2026-34835). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-34831 |
|
Vulnerability in rack (CVE-2026-34831)
vulnerability in rack (CVE-2026-34831). Risk of unauthorized operations or information disclosure. Exploitable via ``body.size``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-34830 |
|
Vulnerability in rack (CVE-2026-34830)
vulnerability in rack (CVE-2026-34830). Confidential information can be exposed externally. Exploitable via ``internal``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-34829 |
|
Vulnerability in rack (CVE-2026-34829)
vulnerability in rack (CVE-2026-34829). Risk of unauthorized operations or information disclosure. Exploitable via ``BoundedIO``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-34763 |
|
Vulnerability in rack (CVE-2026-34763)
vulnerability in rack (CVE-2026-34763). Risk of unauthorized operations or information disclosure. Exploitable via ``root``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-34230 |
|
Vulnerability in rack (CVE-2026-34230)
vulnerability in rack (CVE-2026-34230). Risk of unauthorized operations or information disclosure. Exploitable via ``expanded_accept_encoding``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-32762 |
|
Vulnerability in rack (CVE-2026-32762)
vulnerability in rack (CVE-2026-32762). Risk of unauthorized operations or information disclosure. Exploitable via ``Forwarded``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-26962 |
|
Vulnerability in rack (CVE-2026-26962)
vulnerability in rack (CVE-2026-26962). Risk of unauthorized operations or information disclosure. Exploitable via ``filename``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-26961 |
|
Vulnerability in rack (CVE-2026-26961)
vulnerability in rack (CVE-2026-26961). Risk of unauthorized operations or information disclosure. Exploitable via ``boundary``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-34827 |
|
Vulnerability in rack (CVE-2026-34827)
vulnerability in rack (CVE-2026-34827). Risk of unauthorized operations or information disclosure. Exploitable via ``name``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-34826 |
|
Vulnerability in rack (CVE-2026-34826)
vulnerability in rack (CVE-2026-34826). Risk of unauthorized operations or information disclosure. Exploitable via ``Range``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-34786 |
|
Vulnerability in rack (CVE-2026-34786)
vulnerability in rack (CVE-2026-34786). Risk of unauthorized operations or information disclosure. Exploitable via ``header_rules``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-34785 |
|
Vulnerability in rack (CVE-2026-34785)
vulnerability in rack (CVE-2026-34785). Confidential information can be exposed externally. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-22860 |
|
Path Traversal in rack (CVE-2026-22860)
path traversal in rack (CVE-2026-22860). Confidential information can be exposed externally.
|