| Package | Affected versions | Patched versions |
|---|---|---|
| ruby | = 1.9= 1.9.1= 1.9.2= 1.9.3= 2.0= 2.0.0 |
(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to bypass intended $SAFE level restrictions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free