Vulnerabilities > Rack Cors Project

DATE CVE VULNERABILITY TITLE RISK
2019-11-14 CVE-2019-18978 Path Traversal vulnerability in multiple products
An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby.
network
low complexity
rack-cors-project debian canonical CWE-22
5.0
2017-07-13 CVE-2017-11173 Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. 6.8