Executive brief
ReDoS Vulnerability in Rack::Multipart handle_mime_head
Affected products
- RubyGems rack
Junglewise Threat Intelligence
CVE-2025-49007: ReDoS Vulnerability in Rack::Multipart handle_mime_head
CVE-2025-49007 · Severity: medium · CVSS 4 · Published 2025-06-05
Technologies: rack (RubyGems). Vendors: RubyGems.
Related threats
- Rack CRLF injection in Rack::Multipart::Parser
- Rack has an unsafe default in Rack::QueryParser allows params_limit bypass via semicolon-separated parameters
- Rack session gets restored after deletion
- Rack ReDoS Vulnerability in HTTP Accept Headers Parsing
- Directory traversal in Rack::Directory app bundled with Rack