rack: Rack::Request#host_with_port and `#base_url` return an invalid `Host` verbatim, enabling URL and allowlist bypass
Rack::Request#host_with_port and `#base_url` return an invalid `Host` verbatim, enabling URL and allowlist bypass (moderate). GHSA-2j8w-xcrc-x985.
github.comquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Rack::Request#host_with_port and `#base_url` return an invalid `Host` verbatim, enabling URL and allowlist bypass
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?