Code injection in Narou

심각 9.8CVE-2021-35514 · GHSA-gwrj-88fp-5m36 · Published 28/06/2021 · updated 17/06/2026

요약

Package	Affected versions	Patched versions
narou RubyGems	`< 3.8.0`	`3.8.0`
narou narou_project	`< 3.8.0`	`3.8.0`

Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel.

NVD description

Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.