https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 23:17:36 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-107704 <p>The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizer#identify_format that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file name, can append shell metacharacters like &#39;;&#39; that are executed via Ruby backticks with the Ruby process privileges.</p> <p>The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizer#identify_format that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file name, can append shell metacharacters like &#39;;&#39; that are executed via Ruby backticks with the Ruby process privileges.</p> https://db.gcve.eu/vuln/fkie_cve-2026-107704 https://db.gcve.eu/vuln/ghsa-q8q6-2f24-vxv8 <p>The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizer#identify_format that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file name, can append shell metacharacters like &#39;;&#39; that are executed via Ruby backticks with the Ruby process privileges.</p> <p>The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizer#identify_format that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file name, can append shell metacharacters like &#39;;&#39; that are executed via Ruby backticks with the Ruby process privileges.</p> https://db.gcve.eu/vuln/ghsa-q8q6-2f24-vxv8