Skip to content
OpenAdvisories
Medium DLA-2120-1 1 CVE

rake - security update

Published Feb 26, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 rake 10.3.2-2+deb8u1

Vulnerabilities 1

  • Medium 6.4
    CVE-2020-8130

    OS Command Injection in Rake

    There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.

    rake rake rake Debian Ubuntu RubyGems