Critical and Moderate DoS Vulnerabilities in Ruby's Rack Library Addressed

Linuxsecurity

Critical and Moderate DoS Vulnerabilities in Ruby's Rack Library Addressed

First seen 13 Nov 2025, 06:38 UTC • •50.3

Article Content

1 / 4

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Multiple vulnerabilities affecting the Rack library, used for developing Ruby web applications, have been reported. Fedora 42 and 43 released updates to address a critical denial of service vulnerability in Rack 2.2.21 and a moderate denial of service vulnerability in Rack 3.1.19, respectively. Additionally, Fedora 41 highlighted critical log injection and DoS risks in an earlier version of the library.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 182d ago How this analysis works

More articles in this cluster (3)

Following this threat?

Track Fedora and CVE-2022-44570 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Exploitation of Sangoma Switchvox Vulnerabilities Underway Sangoma Switchvox SMB Edition 8.3 is facing active exploitation of multiple vulnerabilities, particularly CVE-2026-9586, which allows unauthenticated SQL injection leading to remote code execution. The flaw can be exploited by sending crafted HTTP POST requests to the /pa endpoint, enabling attackers to execute…

Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…