Skip to content
OpenAdvisories

Package · RubyGems

bibtex-ruby

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8

    BibTeX-Ruby vulnerable to OS command injection

    BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open.