RHSA-2025:19719HighCVSS 7.5

Red Hat Security Advisory: pcs security update

Published
November 4, 2025
Last Modified
July 11, 2026

🔗 CVE IDs covered (5)

📋 Description

CVE-2025-59830 — rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters CVE-2025-61770 — rack: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) CVE-2025-61771 — rack: Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion) CVE-2025-61772 — rack: Rack memory exhaustion denial of service CVE-2025-61919 — rubygem-rack: Unbounded read in Rack::Request form parsing can lead to memory exhaustion

🔗 References (8)