Medium severity5.3NVD Advisory· Published May 2, 2017· Updated Jun 17, 2026
CVE-2016-4442
CVE-2016-4442
Description
The rack-mini-profiler gem before 0.10.1 for Ruby allows remote attackers to obtain sensitive information about allocated strings and objects by leveraging incorrect ordering of security checks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
rack-mini-profilerRubyGems | < 0.10.1 | 0.10.1 |
Affected products
2- cpe:2.3:a:miniprofiler:rack-mini-profiler:*:*:*:*:*:ruby:*:*Range: <=0.9.9.2
Patches
Vulnerability mechanics
References
5- www.openwall.com/lists/oss-security/2016/06/10/2nvdMailing ListPatchThird Party AdvisoryWEB
- github.com/MiniProfiler/rack-mini-profiler/commit/4273771d65f1a7411e3ef5843329308d0e2d257cnvdPatchThird Party AdvisoryWEB
- github.com/MiniProfiler/rack-mini-profiler/blob/v0.10.1/CHANGELOG.mdnvdRelease NotesThird Party AdvisoryWEB
- github.com/advisories/GHSA-j5hj-fhc9-g24mghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2016-4442ghsaADVISORY
News mentions
0No linked articles in our index yet.