← Back

Excon

excon

Vendor: Excon Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Debian
Excon ProjectOpensuse
4Backports Sle
Debian LinuxExcon+1 more
Jun 17, 2026
Dec 16, 2019
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read...Show more
In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read this data, returning content from the previous response. The race condition window appears to be short, and it would be difficult to purposefully exploit this.Show less