HIGH8.8RubyGems
GHSA-2x8x-jmrp-phxw· CVE-2022-45442Sinatra vulnerable to Reflected File Download attack
Modified: 2/4/2026
package
RubyGems/sinatra
pkg:rubygems/sinatra
MEDIUM5.3RubyGems
GHSA-h29f-7f56-j8wh· CVE-2018-7212Sinatra Path Traversal vulnerability
Modified: 11/8/2023
MEDIUM5.4RubyGems
GHSA-hxx2-7vcw-mqr3· CVE-2024-21510Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision
Modified: 9/10/2026
MEDIUM6.1RubyGems
GHSA-mq35-wqvf-r23c· CVE-2018-11627Sinatra Cross-site Scripting vulnerability
Modified: 2/16/2024
LOWRubyGems
GHSA-mr3q-g2mv-mr4q· CVE-2025-61921Sinatra is vulnerable to ReDoS through ETag header value generation
Modified: 9/10/2026
HIGH7.5RubyGems
GHSA-qp49-3pvw-x4m5· CVE-2022-29970sinatra does not validate expanded path matches
Modified: 11/4/2025