Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
rack/rack-contrib
main @ 9235386
6
Fixes
1
CVEs
CRITICAL
Peak severity
40.0%
Coverage
Highlights
Denial of Service: 2 prior fixes. Scrutinize any change in this area.
Rack::JSONP: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Remote Code Execution: Unsafe JSON deserialization configured with object addition creation allowed arbitrary Ruby class instantiation, potentially enabling remote code execution via untrusted request bodies.
Auth Bypass: The use of shared instance variables for per-request state (such as client IP addresses) in a multi-threaded context allowed concurrent requests to corrupt memory, resulting in access control bypasses.
Denial of Service: The profiler allowed unconstrained execution of application runs via user-controlled parameters, leading to server resource exhaustion (CVE-2024-35231).