Sinatra vulnerabilities
We track 2 vulnerabilities in Sinatra products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2025.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Sinatra vulnerabilities
- 7.5 High severity
sinatra: Inefficient Regular Expression Complexity
Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there is a denial of service vulnerability in the `If-Match` and `If-None-Match` header parsing component of Sinatra, if the `etag` method is used when con
- 8.8 High severity
sinatra: Download of Code Without Integrity Check
Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition head