USN-8190-1: Rack::Session vulnerability
⚠️ Importante
SeungMyung Lee discovered that Rack::Session did not properly reject cookies upon decryption failure. A remote attacker could use this issue to manipulate session contents and possibly gain unauthorized access.
Ubuntu
2026-04-20 15:18 UTC · 2026-04-20 12:18 -03