VendorsRackrack-sessionall versions
Vulnerabilities

Rack Rack-session

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1CVEs
CVE-2026-39324
Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization
Published 2026-04-07 · Analyzed
9.8EPSS 0.003