tocsin

Debian/rexical: critical 9.8

A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented meth

Action: Upgrade rexical to 1.0.7-1 or later.

Affected

introducedfixedlast affected
01.0.7-1-

Fixed versions

1.0.7-1

Sources

published · modified · JSON