Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-34786

Fixed in a distro release EPSS <1%CVSS 5.3

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Static#applicable_rules evaluates several header_rules types against the raw URL-encoded PATH_INFO, while the underlying file-serving path is decoded before the file is served. As a result, a request for a URL-encoded variant of a static path can serve the same file without the headers that header_rules were intended to apply. In deployments that rely on Rack::Static to attach security-relevant response headers to static content, this can allow an attacker to bypass those headers by requesting an encoded form of the path. This issue has been patched in versions 2.2.23, 3.1.21, and 3.2.6.

Published 2026-04-02 · CVE record · OSV

Products: Rack

Fixed upstream

EcosystemPackageFixed in
RubyGemsrack2.2.23
RubyGemsrack3.1.21
RubyGemsrack3.2.6

Distro releases

ReleasePackageFixed in
Chainguardgitlab-exporter-18.1018.10.3-r0
Chainguardgitlab-exporter-18.7no fix
Chainguardgitlab-exporter-18.818.8.9-r0
Chainguardgitlab-exporter-18.918.9.5-r0
Chainguardgitlab-rails-ce-18.118.1.6-r13
Chainguardgitlab-rails-ce-18.1018.10.4-r0
Chainguardgitlab-rails-ce-18.2no fix
Chainguardgitlab-rails-ce-18.3no fix
Chainguardgitlab-rails-ce-18.4no fix
Chainguardgitlab-rails-ce-18.5no fix
Chainguardgitlab-rails-ce-18.6no fix
Chainguardgitlab-rails-ce-18.7no fix
Chainguardgitlab-rails-ce-18.818.8.10-r0
Chainguardgitlab-rails-ce-18.918.9.6-r0
Chainguardgitlab-rails-ce-fips-18.1no fix
Chainguardgitlab-rails-ce-fips-18.1018.10.4-r0
Chainguardgitlab-rails-ce-fips-18.2no fix
Chainguardgitlab-rails-ce-fips-18.3no fix
Chainguardgitlab-rails-ce-fips-18.4no fix
Chainguardgitlab-rails-ce-fips-18.5no fix
Chainguardgitlab-rails-ce-fips-18.6no fix
Chainguardgitlab-rails-ce-fips-18.7no fix
Chainguardgitlab-rails-ce-fips-18.818.8.10-r0
Chainguardgitlab-rails-ce-fips-18.918.9.6-r0
Chainguardkube-fluentd-operator1.18.2-r60
Chainguardkube-fluentd-operator1.18.2-r67
Chainguardlogstash-8.17no fix
Chainguardlogstash-8.17-iamguarded-compatno fix
Chainguardlogstash-8.17-with-output-opensearchno fix
Chainguardlogstash-8.18no fix
Chainguardlogstash-8.18-iamguarded-compatno fix
Chainguardlogstash-8.18-with-output-opensearchno fix
Chainguardlogstash-8.198.19.14-r3
Chainguardlogstash-8.19-iamguarded-compat8.19.14-r3
Chainguardlogstash-8.19-with-output-opensearch8.19.14-r3
Chainguardlogstash-9.09.0.8-r20
Chainguardlogstash-9.0-iamguarded-compat9.0.8-r20
Chainguardlogstash-9.0-with-output-opensearch9.0.8-r20
Chainguardlogstash-9.19.1.10-r6
Chainguardlogstash-9.1-bitnami-compat9.1.10-r6
Chainguardlogstash-9.1-iamguarded-compat9.1.10-r6
Chainguardlogstash-9.1-with-output-opensearch9.1.10-r6
Chainguardlogstash-9.29.2.8-r2
Chainguardlogstash-9.2-iamguarded-compat9.2.8-r2
Chainguardlogstash-9.2-with-output-opensearch9.2.8-r2
Chainguardlogstash-9.39.3.3-r2
Chainguardlogstash-9.3-iamguarded-compat9.3.3-r2
Chainguardlogstash-9.3-with-output-opensearch9.3.3-r2
Chainguardpact-broker-docker2.137.0.2.118.0-r4
Chainguardpact-broker-docker-fips2.137.0.2.118.0-r2
Chainguardruby3.2-rack-2.22.2.23-r0
Chainguardruby3.2-rails-7.27.2.3.1-r2
Chainguardruby3.2-rails-7.27.2.3.1-r1
Chainguardruby3.2-rails-8.08.0.5-r0
Chainguardruby3.3-rack-2.22.2.23-r0
Chainguardruby3.3-rack-2.22.2.22-r0
Chainguardruby3.4-rack-2.22.2.23-r0
Chainguardruby3.4-rails-7.27.2.3.1-r1
Chainguardruby3.4-rails-8.08.0.5-r1
Chainguardruby3.4-rails-8.08.0.5-r2
Chainguardruby4.0-rack-2.22.2.23-r0
Debian 12ruby-rack2.2.22-0+deb12u2
Debian 13ruby-rack3.1.20-0+deb13u2
Debian 14ruby-rack3.2.6-2
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSrmt-server2.27-150500.3.47.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSrmt-server2.27-150500.3.47.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5rmt-server2.27-150500.3.47.1
SUSE Linux Enterprise Module for Public Cloud 15 SP6rmt-server2.27-150500.3.47.1
SUSE Linux Enterprise Server 15 SP5-LTSSrmt-server2.27-150500.3.47.1
SUSE Linux Enterprise Server 15 SP6-LTSSrmt-server2.27-150500.3.47.1
SUSE Linux Enterprise Server 16.0rmt-server3.1.0-160000.1.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5rmt-server2.27-150500.3.47.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6rmt-server2.27-150500.3.47.1
SUSE Linux Enterprise Server for SAP applications 16.0rmt-server3.1.0-160000.1.1
Ubuntu 24.04 LTSruby-rack2.2.7-1ubuntu0.7
Ubuntu 25.10ruby-rack3.1.16-0.1ubuntu0.3
Ubuntu 26.04 LTSruby-rackno fix
Ubuntu Pro 14.04 LTSruby-rack1.5.2-3+deb8u3ubuntu1~esm11
Ubuntu Pro 14.04 LTSruby-rackno fix
Ubuntu Pro 16.04 LTSruby-rack1.6.4-3ubuntu0.2+esm10
Ubuntu Pro 16.04 LTSruby-rackno fix
Ubuntu Pro 18.04 LTSruby-rack1.6.4-4ubuntu0.2+esm10
Ubuntu Pro 20.04 LTSruby-rack2.0.7-2ubuntu0.1+esm10
Ubuntu Pro 22.04 LTSruby-rack2.1.4-5ubuntu1.2+esm3
Wolfikube-fluentd-operator1.18.2-r60
Wolfikube-fluentd-operator1.18.2-r67
Wolfilogstash-9.39.3.3-r2
Wolfilogstash-9.3-iamguarded-compat9.3.3-r2
Wolfilogstash-9.3-with-output-opensearch9.3.3-r2
Wolfiruby3.2-rack-2.22.2.23-r0
Wolfiruby3.3-rack-2.22.2.23-r0
Wolfiruby3.3-rack-2.22.2.22-r0
Wolfiruby3.4-rack-2.22.2.23-r0
Wolfiruby4.0-rack-2.22.2.23-r0
openSUSE Leap 16.0rmt-server3.1.0-160000.1.1
openSUSE Tumbleweedrubygem-rack-2.22.2.23-1.1