Skip to content
OpenAdvisories

Package · RubyGems

discordrb

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.4
    CVE-2023-28102

    Command injection in discordrb

    discordrb is an implementation of the Discord API using Ruby. In discordrb before commit `91e13043ffa` the `encoder.rb` file unsafely constructs a shell string using the file parameter, which can potentially leave clients of discordrb vulnerable to command in…

    shardlab discordrb discordrb RubyGems