Skip to content

Product

debian/ruby-mini-magick vulnerabilities

3 published CVES affecting debian/ruby-mini-magick, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
0
Low
0
Unscored
2
CISA KEV
0

Latest debian/ruby-mini-magick CVEs

Newest publication first

  3. CVE-2019-13574 OS Command Injection in MiniMagick

    Published
    HighCVSS 7.8 EPSS 7.6% PoC

    In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts a '|' character followed by a command.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.