Skip to content

Conversation

@Warshavski
Copy link
Owner

No description provided.

There is an OS command injection vulnerability in Ruby Rake before 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |.
@Warshavski Warshavski self-assigned this Mar 1, 2020
@Warshavski Warshavski merged commit 8347ff2 into master Mar 2, 2020
@Warshavski Warshavski deleted the fix/vulnerability branch May 14, 2020 08:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants