Skip to content

Rack::Request accepts invalid Host characters, enabling host allowlist bypass

Moderate severity GitHub Reviewed Published Apr 1, 2026 in rack/rack • Updated Apr 2, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts