# rack (RubyGems) vulnerabilities Source: https://junglewise.ai/threats/technologies/rack Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/rack.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 55 vulnerabilities in rack (RubyGems): 4 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-125111, was published on 9 November 2026. Nothing was published in the last eight weeks. ## Counts - Last 7 days: 4 - Last 30 days: 4 - Last 90 days: 4 - All time: 55 (0 critical, 0 exploited in the wild) ## About rack (RubyGems) Rack is a Ruby web application interface and middleware component framework. ## Latest rack (RubyGems) vulnerabilities - [CVE-2026-125111: Rack multipart parser denial of service via unbounded scan buffer growth](https://junglewise.ai/threats/cve-2026-125111-rack-multipart-parsing-allows-dos-via-unbounded-scan-buffer) (high, CVSS 7.5, published 9 Nov 2026) - [CVE-2026-125110: Rack::Static header_rules bypass via dot-segment normalization mismatch](https://junglewise.ai/threats/cve-2026-125110-rack-rack-static-header-rules-bypass-via-dot-segment) (medium, CVSS 5.3, published 9 Nov 2026) - [CVE-2026-125109: Rack host validation bypass via HTTP headers](https://junglewise.ai/threats/cve-2026-125109-rack-is-a-modular-ruby-web-server-interface-from-3-0-until-3-1) (medium, CVSS 4.8, published 9 Nov 2026) - [CVE-2026-125108: Rack is a modular Ruby web server interface. Prior to 2.2.25, 3.1.23, and 3.2.8…](https://junglewise.ai/threats/cve-2026-125108-rack-multipart-boundary-ambiguity-guard-in-rack-multipart-parser) (low, CVSS 3.7, published 9 Nov 2026) - [CVE-2026-34835: Rack Rack::Request host allowlist bypass via Host header poisoning](https://junglewise.ai/threats/cve-2026-34835-rack-rack-request-host-allowlist-bypass-via-host-header-poisoning) (medium, CVSS 4.8, published 2 Apr 2026) - [CVE-2026-34827: Rack algorithmic complexity denial of service in Multipart Parser](https://junglewise.ai/threats/cve-2026-34827-rack-algorithmic-complexity-denial-of-service-in-multipart-parser) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-32762: Rack interpretation conflict in Forwarded header parsing](https://junglewise.ai/threats/cve-2026-32762-rack-interpretation-conflict-in-forwarded-header-parsing) (medium, CVSS 4.8, published 2 Apr 2026) - [CVE-2026-26962: Rack CRLF injection in Rack::Multipart::Parser](https://junglewise.ai/threats/cve-2026-26962-rack-crlf-injection-in-rack-multipart-parser) (medium, CVSS 4.8, published 2 Apr 2026) - [CVE-2026-34831: Rack incorrect Content-Length calculation in Rack::Files error responses](https://junglewise.ai/threats/cve-2026-34831-rack-incorrect-content-length-calculation-in-rack-files-error) (medium, CVSS 4.8, published 2 Apr 2026) - [CVE-2026-34830: Rack Rack regular expression injection in Rack::Sendfile](https://junglewise.ai/threats/cve-2026-34830-rack-rack-regular-expression-injection-in-rack-sendfile) (medium, CVSS 5.9, published 2 Apr 2026) - [CVE-2026-34829: Rack uncontrolled resource consumption in Rack::Multipart::Parser](https://junglewise.ai/threats/cve-2026-34829-rack-uncontrolled-resource-consumption-in-rack-multipart-parser) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-34826: Rack denial of service via excessive overlapping HTTP byte ranges](https://junglewise.ai/threats/cve-2026-34826-rack-denial-of-service-via-excessive-overlapping-http-byte-ranges) (medium, CVSS 5.3, published 2 Apr 2026) - [CVE-2026-34786: Rack Rack::Static security header bypass via URL-encoded paths](https://junglewise.ai/threats/cve-2026-34786-rack-rack-static-security-header-bypass-via-url-encoded-paths) (medium, CVSS 5.3, published 2 Apr 2026) - [CVE-2026-34785: Rack Rack::Static information disclosure via partial string matching](https://junglewise.ai/threats/cve-2026-34785-rack-rack-static-information-disclosure-via-partial-string) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-34763: Rack Rack::Directory information disclosure via unescaped regex interpolation](https://junglewise.ai/threats/cve-2026-34763-rack-rack-directory-information-disclosure-via-unescaped-regex) (medium, CVSS 5.3, published 2 Apr 2026) - [CVE-2026-34230: Rack inefficient algorithmic complexity in Rack::Utils.select_best_encoding](https://junglewise.ai/threats/cve-2026-34230-rack-inefficient-algorithmic-complexity-in-rack-utils-select-best) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-26961: Rack interpretation conflict in Multipart Parser boundary extraction](https://junglewise.ai/threats/cve-2026-26961-rack-interpretation-conflict-in-multipart-parser-boundary) (medium, CVSS 5.3, published 2 Apr 2026) - [CVE-2026-22860: Rack directory traversal in Rack::Directory](https://junglewise.ai/threats/cve-2026-22860-rack-directory-traversal-in-rack-directory) (high, CVSS 7.5, published 18 Feb 2026) - [CVE-2026-25500: Stored XSS in Rack::Directory via javascript: filenames rendered into anchor href](https://junglewise.ai/threats/cve-2026-25500-stored-xss-in-rack-directory-via-javascript-filenames-rendered) (low, CVSS 3.1, published 17 Feb 2026) - [CVE-2025-61919: Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing](https://junglewise.ai/threats/cve-2025-61919-rack-is-vulnerable-to-a-memory-exhaustion-dos-through-unbounded) (low, CVSS 3.1, published 10 Oct 2025) - [CVE-2025-61780: Rack has a Possible Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2025-61780-rack-has-a-possible-information-disclosure-vulnerability) (low, CVSS 3.1, published 10 Oct 2025) - [CVE-2025-61772: Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)](https://junglewise.ai/threats/cve-2025-61772-rack-s-multipart-parser-buffers-unbounded-per-part-headers) (low, CVSS 3.1, published 7 Oct 2025) - [CVE-2025-61771: Rack: Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)](https://junglewise.ai/threats/cve-2025-61771-rack-multipart-parser-buffers-large-non-file-fields-entirely-in) (low, CVSS 3.1, published 7 Oct 2025) - [CVE-2025-61770: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)](https://junglewise.ai/threats/cve-2025-61770-rack-s-unbounded-multipart-preamble-buffering-enables-dos-memory) (low, CVSS 3.1, published 7 Oct 2025) - [CVE-2025-59830: Rack has an unsafe default in Rack::QueryParser allows params_limit bypass via semicolon-separated parameters](https://junglewise.ai/threats/cve-2025-59830-rack-has-an-unsafe-default-in-rack-queryparser-allows-params) (low, CVSS 3.1, published 25 Sep 2025) ## Most severe rack (RubyGems) vulnerabilities - [CVE-2026-22860: Rack directory traversal in Rack::Directory](https://junglewise.ai/threats/cve-2026-22860-rack-directory-traversal-in-rack-directory) (high, CVSS 7.5, published 18 Feb 2026) - [CVE-2026-34827: Rack algorithmic complexity denial of service in Multipart Parser](https://junglewise.ai/threats/cve-2026-34827-rack-algorithmic-complexity-denial-of-service-in-multipart-parser) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-34829: Rack uncontrolled resource consumption in Rack::Multipart::Parser](https://junglewise.ai/threats/cve-2026-34829-rack-uncontrolled-resource-consumption-in-rack-multipart-parser) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-34785: Rack Rack::Static information disclosure via partial string matching](https://junglewise.ai/threats/cve-2026-34785-rack-rack-static-information-disclosure-via-partial-string) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-34230: Rack inefficient algorithmic complexity in Rack::Utils.select_best_encoding](https://junglewise.ai/threats/cve-2026-34230-rack-inefficient-algorithmic-complexity-in-rack-utils-select-best) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-125111: Rack multipart parser denial of service via unbounded scan buffer growth](https://junglewise.ai/threats/cve-2026-125111-rack-multipart-parsing-allows-dos-via-unbounded-scan-buffer) (high, CVSS 7.5, published 9 Nov 2026) - [CVE-2026-34830: Rack Rack regular expression injection in Rack::Sendfile](https://junglewise.ai/threats/cve-2026-34830-rack-rack-regular-expression-injection-in-rack-sendfile) (medium, CVSS 5.9, published 2 Apr 2026) - [CVE-2026-34826: Rack denial of service via excessive overlapping HTTP byte ranges](https://junglewise.ai/threats/cve-2026-34826-rack-denial-of-service-via-excessive-overlapping-http-byte-ranges) (medium, CVSS 5.3, published 2 Apr 2026) - [CVE-2026-34786: Rack Rack::Static security header bypass via URL-encoded paths](https://junglewise.ai/threats/cve-2026-34786-rack-rack-static-security-header-bypass-via-url-encoded-paths) (medium, CVSS 5.3, published 2 Apr 2026) - [CVE-2026-34763: Rack Rack::Directory information disclosure via unescaped regex interpolation](https://junglewise.ai/threats/cve-2026-34763-rack-rack-directory-information-disclosure-via-unescaped-regex) (medium, CVSS 5.3, published 2 Apr 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 4 | 0 | 0 | ## Other RubyGems technologies - [actionpack (RubyGems)](https://junglewise.ai/threats/technologies/actionpack): 77 vulnerabilities - [nokogiri (RubyGems)](https://junglewise.ai/threats/technologies/nokogiri): 69 vulnerabilities - [activerecord (RubyGems)](https://junglewise.ai/threats/technologies/rubygems-activerecord): 26 vulnerabilities - [rubygems-update (RubyGems)](https://junglewise.ai/threats/technologies/rubygems-update): 25 vulnerabilities - [puppet (RubyGems)](https://junglewise.ai/threats/technologies/puppet): 23 vulnerabilities - [activesupport (RubyGems)](https://junglewise.ai/threats/technologies/activesupport): 20 vulnerabilities - [actionview (RubyGems)](https://junglewise.ai/threats/technologies/actionview): 19 vulnerabilities - [activestorage (RubyGems)](https://junglewise.ai/threats/technologies/activestorage): 19 vulnerabilities - [camaleon_cms (RubyGems)](https://junglewise.ai/threats/technologies/camaleon-cms): 19 vulnerabilities - [rails-html-sanitizer (RubyGems)](https://junglewise.ai/threats/technologies/rails-html-sanitizer): 18 vulnerabilities - [loofah (RubyGems)](https://junglewise.ai/threats/technologies/loofah): 17 vulnerabilities - [publify_core (RubyGems)](https://junglewise.ai/threats/technologies/publify-core): 15 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "rack (RubyGems) vulnerabilities", https://junglewise.ai/threats/technologies/rack, 13 November 2026.