CVE-2022-30123: Debian Linux

Critical severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days.

A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.

Affected products

• Debian Debian Linux: version 11.0 only
• Rack Project Rack: before 2.0.9.1 (fixed in 2.0.9.1); from 2.1.0, before 2.1.4.1 (fixed in 2.1.4.1); from 2.2.0, before 2.2.3.1 (fixed in 2.2.3.1)

Published 2022-12-05. Last modified 2026-06-17.