espeak-ruby project espeak-ruby vulnerabilities

Latest espeak-ruby project espeak-ruby CVEs

Newest publication first

1. CVE-2016-10193 espeak-ruby allows arbitrary command execution

   Published 2017-03-03

   Critical·CVSS 9.8 PoC

   The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the speak, save, bytes or bytes_wav method in lib/espeak/speech.rb.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.