RubyGems/cremefraiche CVE-2013-2090: critical, EPSS 4.25%
Creme Fraiche contains OS Command Injection
Action: Upgrade cremefraiche to 0.6.1 or later.
bundle update cremefraicheAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.1 | - |
Fixed versions
| 0.6.1 |
Sources
- osv: GHSA-m6f7-46hw-grcj
- https://nvd.nist.gov/vuln/detail/CVE-2013-2090
- http://packetstormsecurity.com/files/121635/Ruby-Gem-Creme-Fraiche-0.6-Command-Injection.html
- http://www.vapid.dhs.org/advisories/cremefraiche-cmd-inj.html
CVE-2013-2090 · published · modified · JSON