An open index of dependabot pull requests across open source projects.

rack

Ecosystem:
rubygems
Package URL:
pkg:gem/rack
Total PRs:
11,495 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
4,504 repositories
Unique Repos (30 days):
1 repository
Security Advisories
Rack has a Possible Information Disclosure Vulnerability
GHSA-r657-rxjc-j557 CVE-2025-61780 MODERATE published 8 months ago • updated 7 days ago
## Summary A possible information disclosure vulnerability existed in `Rack::Sendfile` when running behind a proxy that supports `x-sendfile` head...
Rack has possible DoS Vulnerability with Range Header
GHSA-xj5v-6v4g-jfw6 CVE-2024-26141 LOW published over 2 years ago • updated 21 days ago
# Possible DoS Vulnerability with Range Header in Rack There is a possible DoS vulnerability relating to the Range request header in Rack. This v...
Rack arbitrary code execution via timing attack
GHSA-xc85-32mf-xpv8 CVE-2013-0263 MODERATE published about 4 years ago • updated 9 days ago
Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote...
Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection
GHSA-8cgq-6mh2-7j6v CVE-2025-27111 MODERATE published over 1 year ago • updated 3 days ago
## Summary `Rack::Sendfile` can be exploited by crafting input that includes newline characters to manipulate log entries. ## Details The `Rack:...
Rack session gets restored after deletion
GHSA-vpfw-47h7-xj4g CVE-2025-32441 MODERATE published about 1 year ago • updated 8 days ago
### Summary When using the `Rack::Session::Pool` middleware, simultaneous rack requests can restore a deleted rack session, which allows the unaut...
Recent PRs
Bump rack from 3.2.4 to 3.2.6

openaustralia/planningalerts #2039

3.2.4 → 3.2.6 Patch PR
Open about 2 months ago 4 comments
openaustralia
Bump rack from 3.2.5 to 3.2.6

poposann0746/kebab-tokyo #160

3.2.5 → 3.2.6 Patch PR
Closed about 2 months ago 1 comment
poposann0746
Bump rack from 2.2.9 to 2.2.23

assirims/test_gems #991

2.2.9 → 2.2.23 Patch PR
Open about 2 months ago 1 comment
assirims
Bump rack from 3.2.5 to 3.2.6

quintel/etlocal #675

3.2.5 → 3.2.6 Patch PR
Open 2 months ago 1 comment
quintel
Bump rack from 2.2.22 to 2.2.23

DEFRA/pafs-admin #927

2.2.22 → 2.2.23 Patch PR
Closed 3 months ago 1 comment
DEFRA
Bump rack from 2.2.22 to 2.2.23

theos/theos.dev #95

2.2.22 → 2.2.23 Patch PR
Open 3 months ago 1 comment
theos
Bump rack from 3.1.20 to 3.1.21

mgriffin/photos #72

3.1.20 → 3.1.21 Patch PR
Closed 3 months ago 2 comments
mgriffin
Package Details
Name: rack
Ecosystem: rubygems
PURL Type: gem
Package URL: pkg:gem/rack
JSON API: View JSON
Security Advisories

50

Active advisories
CRITICAL 1
HIGH 18
MODERATE 26
LOW 5
View All gem Advisories
Package Information
Description:

Rack provides a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between (the so-called middleware) into a single method call.

Repository: https://github.com/rack/rack
Homepage: https://github.com/rack/rack
Latest Release: 3.1.16
about 1 year ago
Dependent Repos: 1,043,594
Dependent Packages: 3,634
Downloads: 1,088,635,238
Ranking: Top 0.0045% by dependent repos Top 0.0067% by downloads Top 0.0139% by dependent pkgs
PR Status
Open 4,100 (35.7%)
Merged 2,667 (23.2%)
Closed 3,089 (26.9%)
PR Types
Major 301 (2.6%)
Minor 330 (2.9%)
Patch 9,181 (79.9%)