Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-xgmc-a5rk-zqag
Aliases:
CVE-2019-8324
GHSA-76wm-422q-92mq
|
Improper Input Validation
A crafted gem with a multi-line name is not handled correctly. Therefore, an attacker could inject arbitrary code to the stub line of gemspec, which is evaluated by `ensure_loadable_spec` during the pre-installation check.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|