[Git][security-tracker-team/security-tracker][master] new ruby-rack issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4abc4034 by Moritz Muehlenhoff at 2025-03-11T15:11:18+01:00
new ruby-rack issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -53,7 +53,9 @@ CVE-2025-27911 (An issue was discovered in Datalust Seq before 2024.3.13545. Exp
 CVE-2025-27910 (tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CS ...)
 	NOT-FOR-US: tianti
 CVE-2025-27610 (Rack provides an interface for developing web applications in Ruby. Pr ...)
-	TODO: check
+	- ruby-rack <unfixed>
+	NOTE: https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v
+	NOTE: https://github.com/rack/rack/commit/50caab74fa01ee8f5dbdee7bb2782126d20c6583
 CVE-2025-27436 (The Manage Bank Statements in SAP S/4HANA does not perform required ac ...)
 	NOT-FOR-US: SAP
 CVE-2025-27434 (Due to insufficient input validation, SAP Commerce (Swagger UI) allows ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4abc403441a72319b15413770d2105411b5d36b3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4abc403441a72319b15413770d2105411b5d36b3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250311/50640016/attachment.htm>