Mittel 4.8Linux-Server
CVE-2026-126073
actionpack: Action Pack: Web cache poisoning via improper Vary header generation during content negotiation
actionpack
### Impact Action Pack negotiates the format of a rendered response from the `Accept`, `X-Requested-With` and, for XHR requests without `Accept`, `Content-Type` request headers, but `ActionController::Rendering#_set_vary_header` adds `Vary: Accept` only when the request carries a usable `Accept` header and the response has no `Vary` header yet. A response to a request without `Accept`, or to an XHR request, therefore omits the headers that selected its representation, and a…
10. Nov 2026
Original bei Red Hat öffnen