Description
The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | dragonfly | >= 0.7, < 0.8.6 | 0.8.6 | GHSA-p463-639r-q9g9 |
| RubyGems | dragonfly | >= 0.9, < 0.9.13 | 0.9.13 | GHSA-p463-639r-q9g9 |