https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 21:27:17 +0000 https://cve.radiocsirt.org/vuln/cve-2022-36231 <p>pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.</p> <p>pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.</p> https://cve.radiocsirt.org/vuln/cve-2022-36231 https://cve.radiocsirt.org/vuln/ghsa-9fh3-j99m-f4v7 <p><strong>Affected:</strong> RubyGems: pdf_info</p> <p>pdf_info 0.5.3 is vulnerable to Command Execution. An attacker using a specially crafted payload may execute OS commands by using command chaining because during object initalization there is no validation performed and the user provided path is used.</p> <p><strong>Affected:</strong> RubyGems: pdf_info</p> <p>pdf_info 0.5.3 is vulnerable to Command Execution. An attacker using a specially crafted payload may execute OS commands by using command chaining because during object initalization there is no validation performed and the user provided path is used.</p> https://cve.radiocsirt.org/vuln/ghsa-9fh3-j99m-f4v7