Login Request a demo
SI
Product
Sinatra
by Sinatrarb · last CVE Oct 10, 2025
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 0
Severity
All severities5Critical0High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sinatra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-45442
8.8
1%
Nov 28
Sinatra is a domain-specific language for creating web applications in Ruby
Affected: 2.0.0 before 2.2.3; 3.0.0 before 3.0.4
CVE-2025-61921
7.5
0%
Oct 10
Sinatra has ReDoS vulnerability in ETag header value generation
Affected: before 4.2.0
CVE-2022-29970
7.5
2%
May 2
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files
Affected: before 2.2.0
Showing 3