VYPR

RubyGems package

ldoce

pkg:gem/ldoce

Vulnerabilities (1)

  • CVE-2013-1911Apr 3, 2013
    affected <= 0.0.2

    lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.