Most recent entries from all

CVE-2020-8130

2026-10-05T03:58:47.029413+00:00

Affected: https://github.com/ruby/ruby

There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.

USN-4295-1 — rake vulnerability

2026-10-05T03:58:47.029529+00:00

Affected: Ubuntu:16.04:LTS: rake, Ubuntu:18.04:LTS: rake

It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands.