← Back

Colorscore Project

colorscore_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Colorscore
colorscore

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Colorscore Project
1Colorscore
May 6, 2026
Jan 8, 2016
N/A· v4
10.0 CRITICAL· v3
10.0 HIGH· v2
The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) ima...Show more
The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path, (2) colors, or (3) depth variable.Show less