`rack-session`

Ecosystem:
rubygems

Package URL:
pkg:gem/rack-session

Total PRs:
1,582 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
1,299 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization

GHSA-33qg-7wpp-89cq CVE-2026-39324 CRITICAL published 2 months ago • updated 4 days ago

`Rack::Session::Cookie` incorrectly handles decryption failures when configured with `secrets:`. If cookie decryption fails, the implementation fal...

2.1.1 → 2.1.2 Patch PR

Closed about 1 month ago 1 comment

Bump the bundler-all group with 19 updates

bensheldon/open311status #415

2.1.1 → 2.1.2 Patch PR

Closed about 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

openaustralia/planningalerts #2040

2.1.1 → 2.1.2 Patch PR

Open about 2 months ago 4 comments

Bump rack-session from 2.1.1 to 2.1.2 in /src/oc-id

chef/chef-server #4168

2.1.1 → 2.1.2 Patch PR

Open about 2 months ago 3 comments

build(deps): bump the bundler-production-dependencies group across 1 directory with 72 updates

owjoel/is469 #150

2.1.1 → 2.1.2 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the bundler-production-dependencies group across 1 directory with 70 updates

GuanceDemo/OpenTelemetry_Demo #72

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 1 comment

Bump the bundler-production-dependencies group across 1 directory with 71 updates

jlawton-cribl/opentelemetry-demo #123

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 1 comment

Bump the bundler group across 1 directory with 3 updates

onetimesecret/onetimesecret #2934

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 2 comments

build(deps): bump the bundler group across 2 directories with 5 updates

burhanuddin-anw/opentelemetry-demo #248

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

hackclub/cdn #54

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 2 comments

build(deps): bump rack-session from 2.1.1 to 2.1.2

maatinito/inspecteur-mes-demarches #138

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 2 comments

chore(deps): bump rack-session from 2.1.1 to 2.1.2

neutronsg/neuchat #20

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Build(deps): bump rack-session from 2.1.1 to 2.1.2

talipcakir/beef #17

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

chore(deps): bump rack-session from 2.1.1 to 2.1.2 in /backend

isekaisaru/dreamjournal-app #168

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

lyang/saml-proxy #310

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 2 comments

chore(deps): bump rack-session from 2.1.1 to 2.1.2 in /v2.5-rails

karafka/example-apps #687

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

andrewkress/resume_tailor #22

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

rdunlop/unicycling-rulebook #1054

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 3 comments

chore(deps): bump rack-session from 2.1.1 to 2.1.2

Qluqlu3/SucSeed #33

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

mgriffin/photos #73

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 2 comments

chore(deps): bump rack-session from 2.1.1 to 2.1.2 in /src/email

pactflow/opentelemetry-demo #17

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

juswaldy/matchi #15

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 2 comments

chore(deps): Bump rack-session from 2.1.1 to 2.1.2

openmensa/openmensa #1517

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

masoo/ddd_domain #46

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump rack-session from 2.1.1 to 2.1.2

chatwoot/chatwoot #14017

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

build(deps): bump rack-session from 2.1.1 to 2.1.2

alphagov/frontend #5458

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 2 comments

Bump the bundler group across 1 directory with 2 updates

seahal/umaxica-apps-jit #666

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 2 comments

Build(deps): Bump rack-session from 2.1.1 to 2.1.2

momocus/sakazuki #1232

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

build(deps): bump rack-session from 2.1.1 to 2.1.2

jcowhigjr/strap #9

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

alphagov/specialist-publisher #3619

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

chore(deps): bump rack-session from 2.1.1 to 2.1.2

Bulletdev/prostaff-api #28

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 5 comments

Build(deps): Bump rack-session from 2.1.1 to 2.1.2

jcowhigjr/yelp_search_demo #2127

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2 in /rails_graphql_federation/books

jeantessier/book-reviews #329

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 2 comments

Bump rack-session from 2.1.1 to 2.1.2

richardboehme/lexorank-demo #1198

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 1 comment

Bump the bundler group across 1 directory with 2 updates

onetimesecret/onetimesecret #2931

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

GetStream/stream-chat-android #6337

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

build(deps): bump rack-session from 2.1.1 to 2.1.2

alphagov/account-api #1368

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

ministryofjustice/laa-submit-crime-forms #1769

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

build(deps): bump rack-session from 2.1.1 to 2.1.2

idylle-cynique/sample_app #24

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 1 comment

build(deps): bump rack-session from 2.1.1 to 2.1.2

alphagov/local-links-manager #1851

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

chore(deps): bump rack-session from 2.1.1 to 2.1.2

Coursemology/coursemology2 #8288

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

rubygems/gem_server_conformance #27

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 1 comment

build(deps): bump rack-session from 2.1.1 to 2.1.2 in /examples/applications/ruby-rails

devopness/devopness #2873

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 2 comments

Bump to dependencies: Bump rack-session from 2.1.1 to 2.1.2

decidim/decidim #16537

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2 in the bundler group across 1 directory

berkeley-cdss/flextensions #373

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

Starkast/wikimum #908

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 35 comments

Bump rack-session from 2.1.1 to 2.1.2 in /YakBak

OtherwiseJunk/Yet-Another-Acronym-Game #39

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

armando-couto/api-search-github #91

2.1.1 → 2.1.2 Patch PR

Closed 2 months ago 1 comment

build(deps): bump rack-session from 2.1.1 to 2.1.2

ministryofjustice/cfe-civil #964

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Bump rack-session from 2.1.1 to 2.1.2

alphagov/content-tagger #2231

2.1.1 → 2.1.2 Patch PR

Open 2 months ago 1 comment

Package Details

Name:	`rack-session`
Ecosystem:	rubygems
PURL Type:	gem
Package URL:	`pkg:gem/rack-session`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 1

MODERATE 1

View All gem Advisories

Package Information

Description:

A session implementation for Rack.

Repository:	https://github.com/rack/rack-session
Homepage:	https://github.com/rack/rack-session
Latest Release:	`2.1.1` about 1 year ago
Dependent Repos:	55
Dependent Packages:	23
Downloads:	75,527,272
Ranking:	Top 3.5% by dependent repos Top 2.1875% by downloads Top 1.2994% by dependent pkgs

PR Status

Open 615 (38.9%)

Merged 573 (36.2%)

Closed 167 (10.6%)

PR Types

Major 12 (0.8%)

Minor 431 (27.2%)

Patch 912 (57.6%)

rack-session

Security Advisories

Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization

Rack session gets restored after deletion

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

2

Package Information

PR Status

PR Types

`rack-session`