Vulnerabilities (CVE)

Filtered by vendor Ruby-lang Subscribe
Filtered by product Rake
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-8130 5 Canonical, Debian, Fedoraproject and 2 more 5 Ubuntu Linux, Debian Linux, Fedora and 2 more 2024-02-28 6.9 MEDIUM 6.4 MEDIUM
There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.