You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+14-14Lines changed: 14 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -91,7 +91,7 @@ This release continues Rack's evolution toward a cleaner, more efficient foundat
91
91
92
92
### Security
93
93
94
-
-[CVE-2025-46727](https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx) Unbounded parameter parsing in `Rack::QueryParser` can lead to memory exhaustion.
94
+
-[CVE-2025-46727](https://github.com/advisories/GHSA-gjh7-p2fx-99vx) Unbounded parameter parsing in `Rack::QueryParser` can lead to memory exhaustion.
95
95
96
96
## [3.1.13] - 2025-04-13
97
97
@@ -101,19 +101,19 @@ This release continues Rack's evolution toward a cleaner, more efficient foundat
101
101
102
102
### Security
103
103
104
-
-[CVE-2025-27610](https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v) Local file inclusion in `Rack::Static`.
104
+
-[CVE-2025-27610](https://github.com/advisories/GHSA-7wqh-767x-r66v) Local file inclusion in `Rack::Static`.
105
105
106
106
## [3.1.11] - 2025-03-04
107
107
108
108
### Security
109
109
110
-
-[CVE-2025-27111](https://github.com/rack/rack/security/advisories/GHSA-8cgq-6mh2-7j6v) Possible Log Injection in `Rack::Sendfile`.
110
+
-[CVE-2025-27111](https://github.com/advisories/GHSA-8cgq-6mh2-7j6v) Possible Log Injection in `Rack::Sendfile`.
111
111
112
112
## [3.1.10] - 2025-02-12
113
113
114
114
### Security
115
115
116
-
-[CVE-2025-25184](https://github.com/rack/rack/security/advisories/GHSA-7g2v-jj9q-g3rg) Possible Log Injection in `Rack::CommonLogger`.
116
+
-[CVE-2025-25184](https://github.com/advisories/GHSA-7g2v-jj9q-g3rg) Possible Log Injection in `Rack::CommonLogger`.
117
117
118
118
## [3.1.9] - 2025-01-31
119
119
@@ -146,7 +146,7 @@ This release continues Rack's evolution toward a cleaner, more efficient foundat
146
146
147
147
### Security
148
148
149
-
- Fix potential ReDoS attack in `Rack::Request#parse_http_accept_header`. ([GHSA-cj83-2ww7-mvq7](https://github.com/rack/rack/security/advisories/GHSA-cj83-2ww7-mvq7), [@dwisiswant0](https://github.com/dwisiswant0))
149
+
- Fix potential ReDoS attack in `Rack::Request#parse_http_accept_header`. ([GHSA-cj83-2ww7-mvq7](https://github.com/advisories/GHSA-cj83-2ww7-mvq7), [@dwisiswant0](https://github.com/dwisiswant0))
150
150
151
151
## [3.1.4] - 2024-06-22
152
152
@@ -238,7 +238,7 @@ This release is primarily a maintenance release that removes features deprecated
238
238
239
239
### Security
240
240
241
-
-[CVE-2025-46727](https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx) Unbounded parameter parsing in `Rack::QueryParser` can lead to memory exhaustion.
241
+
-[CVE-2025-46727](https://github.com/advisories/GHSA-gjh7-p2fx-99vx) Unbounded parameter parsing in `Rack::QueryParser` can lead to memory exhaustion.
242
242
243
243
## [3.0.15] - 2025-04-13
244
244
@@ -248,13 +248,13 @@ This release is primarily a maintenance release that removes features deprecated
248
248
249
249
### Security
250
250
251
-
-[CVE-2025-27610](https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v) Local file inclusion in `Rack::Static`.
251
+
-[CVE-2025-27610](https://github.com/advisories/GHSA-7wqh-767x-r66v) Local file inclusion in `Rack::Static`.
252
252
253
253
## [3.0.13] - 2025-03-04
254
254
255
255
### Security
256
256
257
-
-[CVE-2025-27111](https://github.com/rack/rack/security/advisories/GHSA-8cgq-6mh2-7j6v) Possible Log Injection in `Rack::Sendfile`.
257
+
-[CVE-2025-27111](https://github.com/advisories/GHSA-8cgq-6mh2-7j6v) Possible Log Injection in `Rack::Sendfile`.
258
258
259
259
### Fixed
260
260
@@ -264,7 +264,7 @@ This release is primarily a maintenance release that removes features deprecated
264
264
265
265
### Security
266
266
267
-
-[CVE-2025-25184](https://github.com/rack/rack/security/advisories/GHSA-7g2v-jj9q-g3rg) Possible Log Injection in `Rack::CommonLogger`.
267
+
-[CVE-2025-25184](https://github.com/advisories/GHSA-7g2v-jj9q-g3rg) Possible Log Injection in `Rack::CommonLogger`.
268
268
269
269
## [3.0.11] - 2024-05-10
270
270
@@ -456,7 +456,7 @@ This release introduces major improvements to Rack, including enhanced support f
456
456
457
457
### Security
458
458
459
-
-[CVE-2025-59830](https://github.com/rack/rack/security/advisories/GHSA-625h-95r8-8xpm) Unbounded parameter parsing in `Rack::QueryParser` can lead to memory exhaustion via semicolon-separated parameters.
459
+
-[CVE-2025-59830](https://github.com/advisories/GHSA-625h-95r8-8xpm) Unbounded parameter parsing in `Rack::QueryParser` can lead to memory exhaustion via semicolon-separated parameters.
460
460
461
461
## [2.2.17] - 2025-06-03
462
462
@@ -476,25 +476,25 @@ This release introduces major improvements to Rack, including enhanced support f
476
476
477
477
### Security
478
478
479
-
-[CVE-2025-46727](https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx) Unbounded parameter parsing in `Rack::QueryParser` can lead to memory exhaustion.
479
+
-[CVE-2025-46727](https://github.com/advisories/GHSA-gjh7-p2fx-99vx) Unbounded parameter parsing in `Rack::QueryParser` can lead to memory exhaustion.
480
480
481
481
## [2.2.13] - 2025-03-11
482
482
483
483
### Security
484
484
485
-
-[CVE-2025-27610](https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v) Local file inclusion in `Rack::Static`.
485
+
-[CVE-2025-27610](https://github.com/advisories/GHSA-7wqh-767x-r66v) Local file inclusion in `Rack::Static`.
486
486
487
487
## [2.2.12] - 2025-03-04
488
488
489
489
### Security
490
490
491
-
-[CVE-2025-27111](https://github.com/rack/rack/security/advisories/GHSA-8cgq-6mh2-7j6v) Possible Log Injection in `Rack::Sendfile`.
491
+
-[CVE-2025-27111](https://github.com/advisories/GHSA-8cgq-6mh2-7j6v) Possible Log Injection in `Rack::Sendfile`.
492
492
493
493
## [2.2.11] - 2025-02-12
494
494
495
495
### Security
496
496
497
-
-[CVE-2025-25184](https://github.com/rack/rack/security/advisories/GHSA-7g2v-jj9q-g3rg) Possible Log Injection in `Rack::CommonLogger`.
497
+
-[CVE-2025-25184](https://github.com/advisories/GHSA-7g2v-jj9q-g3rg) Possible Log Injection in `Rack::CommonLogger`.
0 commit comments