quick_magick 0.7.3
1 security vulnerability
found in version
0.7.3
quick_magick Gem for Ruby QuickMagick::Image.read Function Crafted String Handling Remote Command Injection
high severity OSVDB-106954
high severity
OSVDB-106954
quick_magick Gem for Ruby contains a flaw in the QuickMagick::Image.read function. The issue is triggered when handling a specially crafted string. This may allow a remote attacker to inject arbitrary commands.
No officially reported memory leakage issues detected.
This gem version does not have any officially reported memory leaked issues.
Gem version without a license.
Unless a license that specifies otherwise is included, nobody can use, copy, distribute, or modify this library without being at risk of take-downs, shake-downs, or litigation.
This gem version is available.
This gem version has not been yanked and is still available for usage.