ALPINE-CVE-2021-31799
ALPINE-CVE-2021-31799
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
CVSS 7.0 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
ruby Alpine:v3.11
- Affected ranges
- ECOSYSTEM: < 2.6.8-r0
Update to 2.6.8-r0
ruby Alpine:v3.12
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
ruby Alpine:v3.13
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
ruby Alpine:v3.14
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
ruby Alpine:v3.15
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
ruby Alpine:v3.16
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
ruby Alpine:v3.17
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
ruby Alpine:v3.18
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
ruby Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
ruby Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
ruby Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
ruby Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
ruby Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
ruby Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0