ratpack vulnerabilities and fixes

Recent CVEs affecting ratpack, with upgrade or downgrade steps. 5 tracked.

ratpack has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2021-06-29. Highest priority: CVE-2021-29485 (score 55/100).

• CVE-2021-29485 CRITICAL 9.9 UPGRADE Ratpack is a toolkit for creating web applications
• CVE-2021-29481 MEDIUM 6.5 UPGRADE Ratpack is a toolkit for creating web applications
• CVE-2021-29480 MEDIUM 4.4 UPGRADE Ratpack is a toolkit for creating web applications
• CVE-2021-29479 HIGH 7.0 UPGRADE Ratpack is a toolkit for creating web applications
• CVE-2019-10770 MEDIUM 6.1 UPGRADE All versions of io.ratpack:ratpack-core from 0.9.10 inclusive and before 1.7.6 are vulnerable to Cross-site Sc

FAQ

How do I fix ratpack vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ratpack being exploited right now?

None of the tracked ratpack CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ratpack CVE should I patch first?

CVE-2021-29485 currently ranks highest (55/100): Ratpack is a toolkit for creating web applications.

RSS feed for ratpack · ← Back to latest CVEs