Search for packages
| purl | pkg:gem/dragonfly@0.3.8 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
OSVDB-110439
|
Remote Code Execution The gem contains a flaw in Uploading & Processing that is due to the gem failing to … |
Vulnerable |
|
OSVDB-97854
|
Windows Shell Escaping Weakness The gem contains a flaw that is due to the program failing to properly escape a … | There are no reported fixed by versions. |
|
GHSA-qrgf-jqqm-x7xv
Aliases: CVE-2013-5671 |
Code injection in dragonfly gem `lib/dragonfly/imagemagickutils.rb` in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands … | There are no reported fixed by versions. |
|
GHSA-j858-xp5v-f8xx
Aliases: CVE-2021-33564 |
Dragonfly contains remote code execution vulnerability An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote … |
Vulnerable |
|
GHSA-fj34-jhjx-xmvv
Aliases: CVE-2021-33473 |
Arbitrary file write in dragonfly An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read and write … |
Vulnerable |