← Back

Ruby Parser

ruby_parser

Vendor: Ryan Davis • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-0162
1Ryan Davis
1Ruby Parser
Apr 29, 2026
Mar 1, 2013
N/A· v4
N/A· v3
2.1 LOW· v2
The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tm...Show more
The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.Show less