Rack has possible DoS Vulnerability in Multipart MIME parsing

Directory traversal in Rack::Directory app bundled with Rack

Rack has an unsafe default in Rack::QueryParser allows params_limit bypass via semicolon-separated parameters

Denial of service via header parsing in Rack

Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing

Local File Inclusion in Rack::Static

Rack's multipart parsing without Content-Length header allows unbounded chunked file uploads

Rack has an Unbounded-Parameter DoS in Rack::QueryParser

Rack::Static prefix matching can expose unintended files under the static root

Denial of Service Vulnerability in Rack Multipart Parsing

Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names

Rack has a Directory Traversal via Rack:Directory

Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)

Rack has quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header

Rack: Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)

Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)

Rack vulnerable to ReDoS in content type parsing (2nd degree polynomial)

Rack vulnerable to Cross-site Scripting

Possible Log Injection in Rack::CommonLogger

Rack has a root directory disclosure via unescaped regex interpolation in Rack::Directory

Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection

Possible Information Leak / Session Hijack Vulnerability in Rack

Rack has Content-Length mismatch in Rack::Files error responses

Rack:: Static header_rules bypass via URL-encoded paths

Rack::Sendfile header-based X-Accel-Mapping regex injection enables unauthorized X-Accel-Redirect

Rack has a Possible Information Disclosure Vulnerability

Rack's greedy multipart boundary parsing can cause parser differentials and WAF bypass.

Rack session gets restored after deletion

Stored XSS in Rack::Directory via javascript: filenames rendered into anchor href

Rack's multipart byte range processing allows denial of service via excessive overlapping ranges

Rack Header Parsing leads to Possible Denial of Service Vulnerability

Rack has possible DoS Vulnerability with Range Header