rubygems bibtex-ruby vulnerabilities

Latest rubygems bibtex-ruby CVEs

Newest publication first

1. CVE-2019-10780 BibTeX-Ruby vulnerable to OS command injection

   Published 2020-01-22

   Critical·CVSS 9.8 EPSS 2.8% PoC

   BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.