{"id":"DSA-6180-1","summary":"ruby-rack - security update","modified":"2026-03-26T22:31:23.149907Z","published":"2026-03-26T00:00:00Z","upstream":["CVE-2026-22860","CVE-2026-25500","DEBIAN-CVE-2026-22860","DEBIAN-CVE-2026-25500"],"affected":[{"package":{"name":"ruby-rack","ecosystem":"Debian:12","purl":"pkg:deb/debian/ruby-rack?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.22-0+deb12u1"}]}],"versions":["2.2.13-1~deb12u1","2.2.20-0+deb12u1","2.2.6.4-1","2.2.6.4-1+deb12u1","2.2.7-1","2.2.7-1.1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/dsa-osv/DSA-6180-1.json"}},{"package":{"name":"ruby-rack","ecosystem":"Debian:13","purl":"pkg:deb/debian/ruby-rack?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.20-0+deb13u1"}]}],"versions":["3.1.16-0.1","3.1.18-1","3.1.18-1~deb13u1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/dsa-osv/DSA-6180-1.json"}}],"schema_version":"1.7.5"}