Description
Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | narou | < 3.8.0 | 3.8.0 | GHSA-gwrj-88fp-5m36 |
High · 8.5
CVE-2021-35514
EUVD-2021-1469GHSA-gwrj-88fp-5m36
Code injection in Narou
Published Jun 28, 2021 · Updated Aug 4, 2024 · Assigned by mitre