Ruby Rack 3.2.x < 3.2.6 Header Injection Vulnerability

Language:

Version 1.4 Apr 21, 2026, 6:07 PM CVSS metrics ("CVSSv2 score" set to 6.4) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N") CVSS metrics ("CVSSv3 score" set to 6.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N") Plugin Feed: 202604211807
Version 1.3 Apr 13, 2026, 4:17 PM New Plugin Feed: 202604131617
Version 1.2 Apr 13, 2026, 9:49 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploit available" set to "False") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202604130949
Version 1.1 Apr 11, 2026, 1:43 AM New Plugin Feed: 202604110143

* Changelogs are generally available for changes made after Nov 1, 2022