An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJmbWYtcng4dy05MzV3

Sounder Contains Arbitrary Command Execution Vulnerability

lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename.

Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 6 years ago
Updated: 6 months ago

Identifiers: GHSA-rfmf-rx8w-935w, CVE-2013-5647
References: Repository:
Blast Radius: 0.0

Affected Packages

Dependent packages: 4
Dependent repositories: 6
Downloads: 18,369 total
Affected Version Ranges: < 1.0.2
Fixed in: 1.0.2
All affected versions: 0.0.1, 0.0.2, 1.0.0
All unaffected versions: 1.0.2, 1.1.0, 1.1.1, 1.2.0