Vulnerabilities (CVE)

Filtered by vendor Ryan Davis Subscribe
Filtered by product Ruby Parser
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-0162 1 Ryan Davis 1 Ruby Parser 2024-02-28 2.1 LOW N/A
The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.