PoC Archive PoC Archive

tag

Session-Forgery

Critical
Rack::Session::Cookie Decrypt-Failure Fallback to Unencrypted Cookies (CVE-2026-39324)
CVE-2026-39324 / GHSA-33qg-7wpp-89cq· rack-session (RubyGems), Rack::Session::Cookie with secrets: option patched