sinatra 0.2.0
Sinatra vulnerable to Reflected File Download attack
high severity CVE-2022-45442~> 2.2.3, >= 3.0.4
An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input.
sinatra does not validate expanded path matches
high severity CVE-2022-29970>= 2.2.0
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.
No officially reported memory leakage issues detected.
This gem version does not have any officially reported memory leaked issues.
Gem version without a license.
Unless a license that specifies otherwise is included, nobody can use, copy, distribute, or modify this library without being at risk of take-downs, shake-downs, or litigation.
This gem version is available.
This gem version has not been yanked and is still available for usage.