Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/fog-dragonfly@0.8.2
purl pkg:gem/fog-dragonfly@0.8.2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-qrgf-jqqm-x7xv
Aliases:
CVE-2013-5671
Code injection in dragonfly gem `lib/dragonfly/imagemagickutils.rb` in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands … There are no reported fixed by versions.
CVE-2013-1756

Improper Control of Generation of Code ('Code Injection') The Dragonfly gem for Ruby, when used with Ruby on Rails, allows … There are no reported fixed by versions.
CVE-2013-5671

Remote Command Injection Unescaped user supplied input is passed to the command line for shell execution in `lib/dragonfly/imagemagickutils.rb`. There are no reported fixed by versions.
CVE-2013-1756
Aliases:
GHSA-p463-639r-q9g9
OSV-90647
Dragonfly Gem for Ruby Crafted Request Parsing Remote Code Execution Dragonfly Gem for Ruby contains a flaw that is triggered … There are no reported fixed by versions.
This package is not known to fix any advisories.