VIR Vulnerability Intelligence Relay

Package impact

ruby RubyGems / sinatra

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2022-29970 high — 8.0 4y ago Important: pcs security update redhatrockylinuxsusedebian+1
CVE-2024-21510 medium — 5.5 2y ago Moderate: pcs security update rockylinuxdebianruby
CVE-2022-45442 medium — 5.5 4y ago Moderate: pcs security update redhatrockylinuxsusedebian+1
CVE-2025-61921 unknown — — 8mo ago Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there is a denial of service vulnerability in the `If-Match` and `If-None-Match` header parsin… debianruby
CVE-2018-11627 unknown — — 8y ago Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception. susedebianruby
CVE-2018-7212 unknown — — 8y ago Sinatra Path Traversal vulnerability ruby