{"schemaVersion":3,"id":"USN-7507-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"ruby-rack vulnerabilities\n\nIt was discovered that Rack incorrectly handled deleted rack sessions. An\nattacker could possibly use this issue to expose sensitive information or\nto gain unauthorized access to user accounts. (CVE-2025-32441)\n\nIt was discovered that Rack incorrectly limited the number of parameters\nin a web request. An attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04\nLTS, Ubuntu 24.04 LTS, Ubuntu 24.10, and Ubuntu 25.04. (CVE-2025-46727)","dates":{"published":"2025-05-12T13:03:34.000Z","modified":"2026-06-25T13:32:30.431Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"ruby-rack","name":"ruby-rack","label":"ruby-rack","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby-rack","purlType":"deb","versions":[{"text":"< 1.5.2-3+deb8u3ubuntu1~esm10","noFixRecorded":false,"fixedIn":null},{"text":"< 1.6.4-3ubuntu0.2+esm8","noFixRecorded":false,"fixedIn":null},{"text":"< 1.6.4-4ubuntu0.2+esm8","noFixRecorded":false,"fixedIn":null},{"text":"< 2.0.7-2ubuntu0.1+esm7","noFixRecorded":false,"fixedIn":null},{"text":"< 2.1.4-5ubuntu1.1+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 2.2.7-1ubuntu0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.2-3+deb8u3ubuntu1~esm10 | < 1.6.4-3ubuntu0.2+esm8 | < 1.6.4-4ubuntu0.2+esm8 | < 2.0.7-2ubuntu0.1+esm7 | < 2.1.4-5ubuntu1.1+esm2 | < 2.2.7-1ubuntu0.3","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7507-1","label":"ubuntu.com/security/notices/USN-7507-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-32441","label":"ubuntu.com/security/CVE-2025-32441","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-46727","label":"ubuntu.com/security/CVE-2025-46727","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2025-32441","CVE-2025-46727"],"downstream":[],"duplicates":[],"related":["CVE-2025-32441","CVE-2025-46727"]},"timeline":[{"kind":"published","date":"2025-05-12T13:03:34.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:32:30.431Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T05:08:35.773Z","stale":false,"partial":false}}