What is GHSA-gwrj-88fp-5m36?

GHSA-gwrj-88fp-5m36 is a security advisory published by GitHub Security Advisories with High severity. Code injection in Narou

Which CVE IDs does GHSA-gwrj-88fp-5m36 cover?

GHSA-gwrj-88fp-5m36 covers the following CVE IDs: CVE-2021-35514. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gwrj-88fp-5m36?

GHSA-gwrj-88fp-5m36 has a CVSS v3 base score of 8.5, published by GitHub Security Advisories.

Which products are affected by GHSA-gwrj-88fp-5m36?

GHSA-gwrj-88fp-5m36 affects 1 product, including: rubygems/narou:\u003c 3.8.0.

GHSA-gwrj-88fp-5m36HighCVSS 8.5

Code injection in Narou

Vendor

GitHub Security Advisories

Published

July 2, 2021

Last Modified

January 24, 2023

🔗 CVE IDs covered (1)

CVE-2021-35514 →

📋 Description

Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel.

🎯 Affected products1

rubygems/narou:< 3.8.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-35514
https://github.com/whiteleaf7/narou/commit/d07720e855293182563b749431dfbf6c2d1cdb42
https://github.com/whiteleaf7/narou/blob/develop/ChangeLog.md#380-20210627
https://vuln.ryotak.me/advisories/51
https://github.com/advisories/GHSA-gwrj-88fp-5m36