https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:58:27.427576+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-46648 CVE-2022-46648 2026-10-06T01:58:27.430380+00:00

Affected: ruby-git

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.

 https://cve.radiocsirt.org/vuln/ghsa-pfpr-3463-c6jh GHSA-pfpr-3463-c6jh — ruby-git has potential remote code execution vulnerability 2026-10-06T01:58:27.430443+00:00

Affected: RubyGems: git

The git gem, between versions 1.2.0 and 1.12.0, incorrectly parsed the output of the `git ls-files` command using `eval()` to unescape quoted file names. If a file name was added to the git repository contained special characters, such as `\n`, then the `git ls-files` command would print the file name in quotes and escape any special characters. If the `Git#ls_files` method encountered a quoted file name it would use `eval()` to unquote and unescape any special characters, leading to potential remote code execution. Version 1.13.0 of the git gem was released which correctly parses any quoted file names.