Skip to content

Rack has a root directory disclosure via unescaped regex interpolation in Rack::Directory

Moderate severity GitHub Reviewed Published Apr 1, 2026 in rack/rack • Updated May 13, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts