https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T20:38:42.710886+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2009-3287 CVE-2009-3287 2026-11-09T20:38:42.712314+00:00

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header.

 https://db.gcve.eu/vuln/ghsa-j24p-r6wx-r79w GHSA-j24p-r6wx-r79w — High severity vulnerability that affects thin 2026-11-09T20:38:42.712388+00:00

Affected: RubyGems: thin

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header.