VYPR

rpm package

opensuse/ruby3.2-rubygem-multi_xml&distro=openSUSE Tumbleweed

pkg:rpm/opensuse/ruby3.2-rubygem-multi_xml&distro=openSUSE%20Tumbleweed

Vulnerabilities (1)

  • CVE-2013-0175Apr 25, 2013
    affected < 0.6.0-1.23fixed 0.6.0-1.23

    multi_xml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU c