pkg:RubyGems/sinatra

All known vulnerabilities

• HIGH8.8CVE-2022-45442ruby-sinatra - security update
  >= 3.0, < 3.0.4
• HIGH7.5CVE-2025-61921Sinatra is vulnerable to ReDoS through ETag header value generation
  from 0, < 4.2.0
• HIGH7.5CVE-2022-29970ruby-sinatra - security update
  from 0, < 2.2.0
• MEDIUM6.1CVE-2018-11627Sinatra Cross-site Scripting vulnerability
  >= 2.0.0, < 2.0.2
• MEDIUM5.4CVE-2024-21510Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision
  from 0, < 4.1.0
• MEDIUM5.3CVE-2018-7212Sinatra Path Traversal vulnerability
  >= 2.0.0.beta1, < 2.0.1