RuboCop gem Insecure use of /tmp (GHSA-wmjf-jpjj-9f3j)
Published: 2017-11-15T20:39:47Z
Aliases: CVE-2017-8418
Severity: LOW · CWE: CWE-668

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.

Affected packages:
package: ecosystem: RubyGems
name: rubocop
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.49.0