Ooooooo-Q

An issue allows unauthenticated remote attackers to escape the served root directory by sending URL-encoded dot segments. By using `%2e%2e/` sequences, which are processed by `decodeURI()` before `path.join()` in the `serveStaticFile()` and `serveDirectoryListing()` functions, attackers can read arbitrary files and list directories outside the intended root.

Sinatra, a domain-specific language for creating web applications in Ruby, contains an issue where carefully crafted input can cause excessive processing time during the parsing of `If-Match` and `If-None-Match` headers. This occurs when the `etag` method is used to construct responses, potentially leading to a denial of service. The `If-Match` and `If-None-Match` headers are typically used in generating the `ETag` header value.

The issue arises from instances of ActionText::Attachable::ContentAttachment included within a rich text area tag, which could potentially contain unsanitized HTML. This could lead to a potential cross-site scripting issue within the Trix editor.

There is a possible XSS vulnerability when using the translation helpers in Action Controller. Applications using translation methods like `translate`, or `t` on a controller, with a key ending in " html", a `:default` key which contains untrusted user input, and the resulting string is used in a view, may be susceptible to an XSS vulnerability. The vulnerability is related to the incorrect neutralization of input data during web page generation, which can allow an attacker to conduct cross-site scripting.

Rack is a modular Ruby web server interface. A denial of service (DoS) vulnerability exists due to improper handling of Range headers. Carefully crafted Range headers can cause the server to respond with an unexpectedly large response, potentially leading to a denial of service. Applications using the `Rack::File` middleware or the `Rack::Utils.byte ranges` methods, including Rails applications, are vulnerable.