Login Request a demo
SI
Product
Sinatra
by Sinatrarb · last CVE Oct 10, 2025
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 0
Severity
All severities5Critical0High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sinatra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-45442
8.8
1%
Nov 28
Sinatra is a domain-specific language for creating web applications in Ruby
Affected: 2.0.0 before 2.2.3; 3.0.0 before 3.0.4
CVE-2025-61921
7.5
0%
Oct 10
Sinatra is a domain-specific language for creating web applications in Ruby
Affected: before 4.2.0
CVE-2022-29970
7.5
2%
May 2
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files
Affected: before 2.2.0
CVE-2018-11627
6.1
2%
May 31
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception
Affected: before 2.0.2
CVE-2018-7212
5.3
2%
Feb 18
An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows
Affected: 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; +3 more
Showing 5