Jordansissel vulnerabilities
We track 1 vulnerability in Jordansissel products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 21, 2022.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Jordansissel vulnerabilities
- 7.8 High severity
ruby-arr-pm: Improper Neutralization of Special Elements used in an OS Command
Arr-pm is an RPM reader/writer library written in Ruby. Versions prior to 0.0.12 are subject to OS command injection resulting in shell execution if the RPM contains a malicious "payload compressor" field. This vulnerability impacts the `extract` and `files` m