gitlab/gem/sprout/CVE-2013-6421
Command injection vulnerability
The `unpack_zip` function in `archive_unpacker.rb` in the sprout gem for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename or path.