Skip to content

Rack::Static prefix matching can expose unintended files under the static root

High severity GitHub Reviewed Published Apr 1, 2026 in rack/rack • Updated May 13, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts