Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-38969

webrick: rubygem-webrick: WEBrick: Request smuggling via re-parsing of Content-Length header

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS 3.1 · 6.5 Medium EPSS n/a KEV · Not listed
Vendors
Ruby
Products
Webrick
CVE-2025-6442

Ruby WEBrick read_header HTTP Request Smuggling Vulnerability

Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The specific flaw exists within the read_headers method. The issue results from the inconsistent parsing of terminators of HTTP headers. An attacker can leverage this vulnerability to smuggle arbitrary HTTP requests. Was ZDI-CAN-21876.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Ruby Ruby-lang
Products
Webrick Webrick