Executive brief
Rack session gets restored after deletion
Affected products
- RubyGems rack
Junglewise Threat Intelligence
CVE-2025-32441: Rack session gets restored after deletion
CVE-2025-32441 · Severity: low · CVSS 3.1 · Published 2025-05-08
Technologies: rack (RubyGems). Vendors: RubyGems.
Related threats
- Rack CRLF injection in Rack::Multipart::Parser
- Rack has an unsafe default in Rack::QueryParser allows params_limit bypass via semicolon-separated parameters
- ReDoS Vulnerability in Rack::Multipart handle_mime_head
- Rack ReDoS Vulnerability in HTTP Accept Headers Parsing
- Directory traversal in Rack::Directory app bundled with Rack