{"schemaVersion":3,"id":"CVE-2026-32762","aliases":["UBUNTU-CVE-2026-32762","DEBIAN-CVE-2026-32762","CGA-25pw-6rwm-f354","CGA-3f4q-9v2p-mjq3","CGA-6hrx-hr3m-588g","CGA-c38r-pq8r-wfxq","CGA-f83x-c8f9-69pr","CGA-j7hf-3jjh-xmgx","CGA-mcc2-22gh-hqxx","CGA-p6pv-mw53-23p9","CGA-p793-qppp-2hxw","CGA-w2j9-vph2-gfjq","CGA-2vgh-hr4j-m429","CGA-3ffc-xm92-ghpf","CGA-4488-m586-5gxh","CGA-459r-5rj5-888q","CGA-56jc-h95m-444q","CGA-6969-9279-w475","CGA-6g2g-83hm-jx8m","CGA-6jcg-2g8r-x6ff","CGA-6jvm-6g34-7vcm","CGA-6rx8-gvcq-m9qm","CGA-7h9r-857v-2w6m","CGA-849x-x969-9hxc","CGA-94p7-v63f-8cg8","CGA-956p-mxfj-xmpm","CGA-c3h4-vmm2-cp77","CGA-cf4q-63rq-c8gw","CGA-cf64-3f9f-84vw","CGA-cj36-h6pw-w6m4","CGA-cpc2-x7wp-3xfx","CGA-fhm5-9qch-2gvc","CGA-fx2w-28cj-2682","CGA-g36w-j6qr-w782","CGA-h8vc-jjqm-qh88","CGA-hqhj-x7w2-wrq5","CGA-hx5c-84mp-9pq6","CGA-j326-c376-4c78","CGA-jfvh-cj44-wmc6","CGA-jqjv-4fgw-vxx8","CGA-mc24-xm64-6473","CGA-mh66-rgj7-3qgf","CGA-mhgg-7xwr-vj82","CGA-mm6r-mpx2-pcvh","CGA-mmwr-3vp8-2q9v","CGA-mqg2-557w-5w5j","CGA-p6p8-r7r4-6mfh","CGA-p9rp-q6fh-98cr","GHSA-qfgr-crr9-7r49","CGA-r5q2-j4g9-pq57","CGA-rgwv-8x2w-8c4f","CGA-rr73-34cc-956f","CGA-v7hc-3c3h-6m7h","CGA-v8h5-xqh2-q299","CGA-vc59-6j98-c4xx","CGA-vp57-2fx5-3pw7","CGA-vx58-5rcx-38q7","CGA-w72c-grvf-h9mg","CGA-w76j-rm26-6c33","CGA-wgxj-43rw-vrm2","CGA-wvjq-hqh4-c2g4","CGA-x59m-8wp6-3jh3","CGA-xh73-qvcv-2vcp"],"status":"published","duplicateOf":null,"title":null,"description":"Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21 and 3.2.0 to before 3.2.6, Rack::Utils.forwarded_values parses the RFC 7239 Forwarded header by splitting on semicolons before handling quoted-string values. Because quoted values may legally contain semicolons, a header can be interpreted by Rack as multiple Forwarded directives rather than as a single quoted for value. In deployments where an upstream proxy, WAF, or intermediary validates or preserves quoted Forwarded values differently, this discrepancy can allow an attacker to smuggle host, proto, for, or by parameters through a single header value. This issue has been patched in versions 3.1.21 and 3.2.6.","dates":{"published":"2026-04-02T17:06:50.819Z","modified":"2026-04-02T17:42:42.305Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","exploitability":10,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","exploitability":10,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","exploitability":5.6,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","exploitability":5.6,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Rubygems","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","exploitability":5.6,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00245,"percentile":0.14771,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.066,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00179},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00245,"percentile":0.14771}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00179,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00245,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00245,"percentile":0.14771}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-436","name":"Interpretation Conflict","description":"Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/436.html"}],"affected":[{"vendor":"chainguard","product":"kube-fluentd-operator","name":"kube-fluentd-operator","label":"kube-fluentd-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kube-fluentd-operator","purlType":"apk","versions":[{"text":"< 1.18.2-r67","noFixRecorded":false,"fixedIn":null},{"text":"< 1.18.2-r60","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r67 | < 1.18.2-r60","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17","name":"logstash-8.17","label":"logstash-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17-iamguarded-compat","name":"logstash-8.17-iamguarded-compat","label":"logstash-8.17-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.17-with-output-opensearch","name":"logstash-8.17-with-output-opensearch","label":"logstash-8.17-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.17-with-output-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18","name":"logstash-8.18","label":"logstash-8.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18-iamguarded-compat","name":"logstash-8.18-iamguarded-compat","label":"logstash-8.18-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.18-with-output-opensearch","name":"logstash-8.18-with-output-opensearch","label":"logstash-8.18-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.18-with-output-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19","name":"logstash-8.19","label":"logstash-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19","purlType":"apk","versions":[{"text":"< 8.19.14-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.14-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-iamguarded-compat","name":"logstash-8.19-iamguarded-compat","label":"logstash-8.19-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.19.14-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.14-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-with-output-opensearch","name":"logstash-8.19-with-output-opensearch","label":"logstash-8.19-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.19.14-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.14-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0","name":"logstash-9.0","label":"logstash-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0","purlType":"apk","versions":[{"text":"< 9.0.8-r20","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r20","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0-iamguarded-compat","name":"logstash-9.0-iamguarded-compat","label":"logstash-9.0-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.0.8-r20","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r20","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.0-with-output-opensearch","name":"logstash-9.0-with-output-opensearch","label":"logstash-9.0-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.0-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.0.8-r20","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r20","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1","name":"logstash-9.1","label":"logstash-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1","purlType":"apk","versions":[{"text":"< 9.1.10-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-bitnami-compat","name":"logstash-9.1-bitnami-compat","label":"logstash-9.1-bitnami-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-bitnami-compat","purlType":"apk","versions":[{"text":"< 9.1.10-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-iamguarded-compat","name":"logstash-9.1-iamguarded-compat","label":"logstash-9.1-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.1.10-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.1-with-output-opensearch","name":"logstash-9.1-with-output-opensearch","label":"logstash-9.1-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.1-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.1.10-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.10-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2","name":"logstash-9.2","label":"logstash-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2","purlType":"apk","versions":[{"text":"< 9.2.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-iamguarded-compat","name":"logstash-9.2-iamguarded-compat","label":"logstash-9.2-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.2.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-with-output-opensearch","name":"logstash-9.2-with-output-opensearch","label":"logstash-9.2-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.2.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3","purlType":"apk","versions":[{"text":"< 9.3.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.3.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-with-output-opensearch","name":"logstash-9.3-with-output-opensearch","label":"logstash-9.3-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.3.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pact-broker-docker","name":"pact-broker-docker","label":"pact-broker-docker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pact-broker-docker","purlType":"apk","versions":[{"text":"< 2.137.0.2.118.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.137.0.2.118.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pact-broker-docker-fips","name":"pact-broker-docker-fips","label":"pact-broker-docker-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pact-broker-docker-fips","purlType":"apk","versions":[{"text":"< 2.137.0.2.118.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.137.0.2.118.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-rails-7.2","name":"ruby3.2-rails-7.2","label":"ruby3.2-rails-7.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-rails-7.2","purlType":"apk","versions":[{"text":"< 7.2.3.1-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 7.2.3.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.3.1-r1 | < 7.2.3.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-rails-8.0","name":"ruby3.2-rails-8.0","label":"ruby3.2-rails-8.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-rails-8.0","purlType":"apk","versions":[{"text":"< 8.0.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-rails-7.2","name":"ruby3.4-rails-7.2","label":"ruby3.4-rails-7.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-rails-7.2","purlType":"apk","versions":[{"text":"< 7.2.3.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.3.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.4-rails-8.0","name":"ruby3.4-rails-8.0","label":"ruby3.4-rails-8.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.4-rails-8.0","purlType":"apk","versions":[{"text":"< 8.0.5-r2","noFixRecorded":false,"fixedIn":null},{"text":"< 8.0.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.5-r2 | < 8.0.5-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kube-fluentd-operator","name":"kube-fluentd-operator","label":"kube-fluentd-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kube-fluentd-operator","purlType":"apk","versions":[{"text":"< 1.18.2-r67","noFixRecorded":false,"fixedIn":null},{"text":"< 1.18.2-r60","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.2-r67 | < 1.18.2-r60","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3","purlType":"apk","versions":[{"text":"< 9.3.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.3-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.3.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.3-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-with-output-opensearch","name":"logstash-9.3-with-output-opensearch","label":"logstash-9.3-with-output-opensearch","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.3.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.3-r2","eol":null,"hubHref":null},{"vendor":"debian","product":"ruby-rack","name":"ruby-rack","label":"ruby-rack","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/ruby-rack","purlType":"deb","versions":[{"text":"< 3.1.20-0+deb13u2","noFixRecorded":false,"fixedIn":null},{"text":"< 3.2.6-2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.20-0+deb13u2 | < 3.2.6-2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ruby-rack","name":"ruby-rack","label":"ruby-rack","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby-rack","purlType":"deb","versions":[{"text":"< 3.1.16-0.1ubuntu0.3","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 3.1.16-0.1ubuntu0.3 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"RubyGems","product":"rack","name":"rack","label":"rack","ecosystem":"RubyGems","cpePart":null,"purl":"pkg:gem/rack","purlType":"gem","versions":[{"text":"≥ 3.0.0.beta1, < 3.1.21","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.2.0, < 3.2.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.beta1, < 3.1.21 | ≥ 3.2.0, < 3.2.6","eol":null,"hubHref":null},{"vendor":"rack","product":"rack","name":"rack","label":"rack","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0.beta1, < 3.1.21","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.0.0, < 3.1.21","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.2.0, < 3.2.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.beta1, < 3.1.21 | ≥ 3.0.0, < 3.1.21 | ≥ 3.2.0, < 3.2.6","eol":null,"hubHref":"/vendor/rack/rack"}],"affectedCount":37,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/rack/rack/security/advisories/GHSA-qfgr-crr9-7r49","label":"github.com/rack/rack/security/advisories/GHSA-qfgr-crr9-7r49","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Mitigation","Vendor Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-32762","label":"ubuntu.com/security/CVE-2026-32762","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32762","label":"www.cve.org/CVERecord?id=CVE-2026-32762","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-8182-1","label":"ubuntu.com/security/notices/USN-8182-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-32762","label":"security-tracker.debian.org/tracker/CVE-2026-32762","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32762.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32762.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32762","label":"nvd.nist.gov/vuln/detail/CVE-2026-32762","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/rack/rack","label":"github.com/rack/rack","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-32762.yml","label":"github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2026-32762.yml","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["MGASA-2026-0226"],"duplicates":[],"related":["CGA-39JG-9VR8-XM6F","USN-8182-1"]},"timeline":[{"kind":"published","date":"2026-04-02T17:06:50.819Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-02T17:42:42.305Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T23:49:11.536Z","stale":false,"partial":false}}