Skip to content
This repository was archived by the owner on Feb 14, 2024. It is now read-only.
This repository was archived by the owner on Feb 14, 2024. It is now read-only.

Arbitrary Code Execution in Rdoc #24

@sniffler-app

Description

@sniffler-app

Description

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.

Informations

Manifest Path: Gemfile.lock

Please look at dependabot report: https://github.com/swipely/bubz/security/dependabot/104

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions