RubyGems/job-iteration CVE-2025-53623: high 8.1, EPSS 0.83%

Job Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator class

Action: Upgrade job-iteration to 1.11 or later.

bundle update job-iteration

Affected

Fixed versions

Sources

• osv: GHSA-6qjf-g333-pv38
• nvd: CVE-2025-53623
• https://github.com/Shopify/job-iteration/security/advisories/GHSA-6qjf-g333-pv38
• https://github.com/Shopify/job-iteration/pull/595
• https://github.com/Shopify/job-iteration/commit/1a7adfdd041105a5e45e774cadc6b973a292ba55
• https://github.com/Shopify/job-iteration
• https://github.com/Shopify/job-iteration/releases/tag/v1.11.0
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/job-iteration/CVE-2025-53623.yml

CVE-2025-53623 · published 2025-07-14T17:55:06Z · modified 2025-08-20T23:33:56.765583Z · JSON