Webbynode Code Injection vulnerability (GHSA-p65m-qr5x-rrqq)
Published: 2017-10-24T18:33:36Z
Aliases: CVE-2013-7086
Severity: HIGH · CWE: CWE-94

The message function in `lib/webbynode/notify.rb` in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message.

Affected packages:
package: ecosystem: RubyGems
name: webbynode
ranges: type: ECOSYSTEM
events: introduced: 0
last_affected: 1.0.5.3