Package · RubyGems

carrierwave

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.4

CVE-2021-21305 EPSS 13%

Code Injection vulnerability in CarrierWave

CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1, there is a code injection vulnerability. The "#manipulate!" method inappropriately evals the…

carrierwaveuploader carrierwave carrierwave ruby-carrierwave Debian Ubuntu RubyGems

Feb 8, 2021