passenger
passengercounted 2026-10-07 03:22 UTC
As of 2026-10-07, 216 hosts ran passenger with at least one known CVE on a service open at their latest check, across 50 versions with CVEs; 10 distinct CVEs.
Known CVEs on hosts running it
216hosts with known CVEs
10distinct CVEs
50versions with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Versions with known CVEs
| Version | Hosts with CVEs | CVEs |
|---|---|---|
| 4.0.53 | 19 | 3 |
| 5.3.1 | 19 | 5 |
| 4.0.58 | 14 | 3 |
| 6.0.23 | 14 | 1 |
| 5.0.30 | 13 | 4 |
| 6.0.22 | 13 | 1 |
| 5.1.2 | 10 | 3 |
| 5.1.12 | 9 | 2 |
| 5.1.5 | 9 | 3 |
| 5.1.11 | 8 | 2 |
| 5.2.3 | 7 | 2 |
| 4.0.57 | 6 | 3 |
| 5.0.24 | 5 | 4 |
| 5.0.26 | 5 | 4 |
| 4.0.44 | 4 | 3 |
| 5.0.23 | 4 | 4 |
| 5.0.28 | 4 | 4 |
| 5.0.16 | 3 | 4 |
| 5.0.21 | 3 | 4 |
| 5.0.22 | 3 | 4 |
| 5.1.4 | 3 | 3 |
| 5.1.8 | 3 | 3 |
| 3.0.13 | 2 | 5 |
| 3.0.21 | 2 | 5 |
| 4.0.55 | 2 | 3 |
| 5.0.10 | 2 | 4 |
| 5.0.20 | 2 | 4 |
| 5.0.27 | 2 | 4 |
| 5.0.29 | 2 | 4 |
| 5.0.7 | 2 | 3 |
| 5.2.0 | 2 | 2 |
| 6.0.24 | 2 | 1 |
| 2.2.11 | 1 | 4 |
| 2.2.15 | 1 | 4 |
| 3.0.11 | 1 | 5 |
| 3.0.14 | 1 | 5 |
| 3.0.18 | 1 | 5 |
| 3.0.19 | 1 | 5 |
| 3.0.2 | 1 | 5 |
| 3.0.7 | 1 | 5 |
| 4.0.48 | 1 | 3 |
| 4.0.60 | 1 | 3 |
| 4.0.8 | 1 | 5 |
| 5.0.18 | 1 | 4 |
| 5.0.25 | 1 | 4 |
| 5.0.9 | 1 | 3 |
| 5.1.0 | 1 | 3 |
| 5.1.1 | 1 | 3 |
| 5.1.6 | 1 | 3 |
| 5.2.1 | 1 | 2 |
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2018-12615 MEDIUM 5.3 | 187 |
| CVE-2018-12029 HIGH 7.0 | 185 |
| CVE-2016-10345 HIGH 7.8 | 113 |
| CVE-2017-16355 MEDIUM 4.7 | 78 |
| CVE-2025-26803 HIGH 7.5 | 29 |
| CVE-2018-12026 CRITICAL 9.8 | 19 |
| CVE-2018-12027 HIGH 8.8 | 19 |
| CVE-2018-12028 HIGH 7.8 | 19 |
| CVE-2014-1831 LOW 2.1 | 13 |
| CVE-2014-1832 LOW 2.1 | 13 |
Hosts: matches on services open at each host's latest check, over every version.