USN-8990-1: Sprockets vulnerability
Published Nov 3, 2026
·Updated
It was discovered that Sprockets incorrectly handled certain specially crafted requests when the Sprockets server was used in production. A remote attacker could possibly use this issue to access files outside of the application's root directory.
Affected Software
3 affected componentsFixes available
All of the following
ubuntu/ruby-sprockets<3.3.0-1ubuntu0.1~esm1
3.3.0-1ubuntu0.1~esm1
Ubuntu Ubuntu=16.04
ubuntu/ruby-sprockets<3.3.0-1ubuntu0.1~esm1
3.3.0-1ubuntu0.1~esm1
Event History
Nov 3, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Advisory Published
via OSV·05:37 PM
Data Sourced
via OSV·05:37 PM
DescriptionAffected Software