gitlab/gem/ldoce/CVE-2013-1911
Remote command execution in Ruby Gem ldoce
The package ldoce passes a URL to commandline for audio output of the pronunciation of a dictonary word. If the URL contains a shell metacharacter, arbitrary code can be executed remotely as the client.