Skip to content
OpenAdvisories

Package · RubyGems

ruby_parser-legacy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.8
    CVE-2019-18409

    Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource

    The ruby_parser-legacy (aka legacy) gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem (which has a legacy dependency) 4.5.0 through 4.7.0 is used, a local user can insert malicious code into…

    ruby_parser-legacy RubyGems