All 2 CVE vulnerabilities found in rack-session, with AI-generated Chinese analysis, references, and POCs.
Vendor: rack
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-39324 | Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization CWE-287 | 7.4AI | HighAI | 2026-04-07 |
| CVE-2025-46336 | Rack session gets restored after deletion CWE-362 | 4.2 | Medium | 2025-05-08 |
All 2 known CVE vulnerabilities affecting rack-session with full Chinese analysis, references, and POCs where available.