Excon Project

Excon

2 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.3%
  • Veröffentlicht 17.07.2026 20:09:44
  • Zuletzt bearbeitet 29.07.2026 15:20:21

Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did not provide a custom list of headers to strip. This could cause inadver...

  • EPSS 1.44%
  • Veröffentlicht 16.12.2019 20:15:15
  • Zuletzt bearbeitet 28.07.2026 18:16:09

In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read this data, returning content ...