Rack / Rack-Session

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-39324	Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization	CRITICAL	9.3	Apr 7, 2026
CVE-2025-46336	Rack session gets restored after deletion	MEDIUM	4.2	May 8, 2025

Rows per page

Showing 1 to 2 of 2 CVEs