Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2024-27456

Published: 26 February 2024

rack-cors (aka Rack CORS Middleware) 2.0.1 has 0666 permissions for the .rb files.

Notes

AuthorNote
alexmurray
Only affects the rack-cors gem, not the ruby-rack-cors package
as shipped in Ubuntu

Priority

Negligible

Status

Package Release Status
ruby-rack-cors
Launchpad, Ubuntu, Debian
bionic Not vulnerable

focal Not vulnerable

jammy Not vulnerable

mantic Not vulnerable

trusty Ignored
(end of standard support)
upstream Not vulnerable

xenial Not vulnerable