CVE-2026-32762 PUBLISHED CVSS 4.800000190734863 MEDIUM

Rack: Forwarded Header semicolon injection enables Host and Scheme spoofing

Risk Scores

CVSS v3.1
4.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected Products

VendorProductVersions
RubyGemsrack3.2.0, *
rackrack>= 3.0.0.beta1, < 3.1.21, *

Timeline

References

Open in Interactive Console →