3 known security vulnerabilities

  • highGHSA-qp49-3pvw-x4m5(CVE-2022-29970)

    sinatra does not validate expanded path matches

Show 2 more vulnerabilities
1 moderate1 low
  • moderateGHSA-hxx2-7vcw-mqr3(CVE-2024-21510)

    Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision

  • lowGHSA-mr3q-g2mv-mr4q(CVE-2025-61921)

    Sinatra is vulnerable to ReDoS through ETag header value generation

Classy web-development dressed in a DSL

Required Ruby Version

None

Authors

Blake Mizerany, Ryan Tomayko, Simon Rozet, Konstantin Haase

Versions

  1. 4.2.1

    1. source

      1. 4.2.1 source October 10, 2025 (133 KB)
  2. 4.2.0

    1. source

      1. 4.2.0 source October 08, 2025 (133 KB)
  3. 4.1.1

    1. source

      1. 4.1.1 source November 20, 2024 (133 KB)
  4. 4.1.0

    1. source

      1. 4.1.0 source November 18, 2024 (133 KB)
  5. 4.0.1

    1. source

      1. 4.0.1 source May 23, 2025 (132 KB)
  6. 1.1.2

    1. source

      1. 1.1.2 source December 25, 2010 (182 KB)
Show all versions (112 total)

SHA 256 checksum

← Previous version Next version →