ruby_parser-legacy
ruby_parser-legacy includes the ruby 1.8 and 1.9 parsers from ruby_parser (now removed) and plugs them into the existing system.
Activity
- Latest release
- 7y ago
- Total releases
- 1
- Cadence
- —
- Last 12 months
- 0
Details
- License
- MIT
- First release
- Mar 15, 2019
Releases
| Version | Released | |
|---|---|---|
1.0.0
initial
1 CVE
CVE-2019-18409
GHSA-hhwc-8g49-j8jx
Oct 25, 2019
Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource
7.8
/ 10
High
Local
Low
Low
None
Unchanged
High
High
High
The ruby_parser-legacy (aka legacy) gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem (which has a legacy dependency) 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the Affected versions
1.0.0
References
Updated Feb 16, 2024 · Source: OSV.dev |