awesome_spawn
AwesomeSpawn is a module that provides some useful features over Ruby's Kernel.spawn.
View on Github
Activity
- Latest release
- 6mo ago
- Total releases
- 11
- Cadence
- ~6 months
- Last 12 months
- 1
Reach
- Stars
- —
Details
- License
- MIT
- First release
- Jan 04, 2014
| Version | Released | |
|---|---|---|
1.7.0
minor
| ||
1.6.0
minor
| ||
1.5.0
minor
| ||
1.4.1
patch
| ||
1.4.0
minor
| ||
1.3.0
minor
| ||
1.2.1
patch
| ||
1.2.0
minor
| ||
1.1.1
patch
1 CVE
CVE-2014-0156
GHSA-qpqw-mc85-qvm9
Jul 01, 2022
OS Command Injection in awesome spawn
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
Awesome spawn prior to version 1.2.0 contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command. Affected versions
1.0.0
1.1.0
1.1.1
Fixed in
1.2.0
References Updated Feb 18, 2024 · Source: OSV.dev | ||
1.1.0
minor
1 CVE
CVE-2014-0156
GHSA-qpqw-mc85-qvm9
Jul 01, 2022
OS Command Injection in awesome spawn
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
Awesome spawn prior to version 1.2.0 contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command. Affected versions
1.0.0
1.1.0
1.1.1
Fixed in
1.2.0
References Updated Feb 18, 2024 · Source: OSV.dev | ||
1.0.0
initial
1 CVE
CVE-2014-0156
GHSA-qpqw-mc85-qvm9
Jul 01, 2022
OS Command Injection in awesome spawn
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
Awesome spawn prior to version 1.2.0 contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command. Affected versions
1.0.0
1.1.0
1.1.1
Fixed in
1.2.0
References Updated Feb 18, 2024 · Source: OSV.dev |