deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-469h-mqg8-535r
Package: decidim-core (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 0.25.0, < 0.26.7
Patched in: 0.26.7

Summary: Decidim Cross-site Scripting vulnerability in the external link redirections

Details:
### Impact

The external link feature is susceptible to Cross-site scripting. This allows a remote attacker to execute JavaScript code in the context of a currently logged-in user. An attacker could use this vulnerability to make other users endorse or support proposals they have no intention of supporting or endorsing.

### Patches

The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3) and [v0.26.7](https://github.com/decidim/decidim/releases/tag/v0.26.7)
GitHub Security Advisory: GHSA-469h-mqg8-535r
Package: decidim (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 0.25.0, < 0.26.7
Patched in: 0.26.7

Summary: Decidim Cross-site Scripting vulnerability in the external link redirections

Details:
### Impact

The external link feature is susceptible to Cross-site scripting. This allows a remote attacker to execute JavaScript code in the context of a currently logged-in user. An attacker could use this vulnerability to make other users endorse or support proposals they have no intention of supporting or endorsing.

### Patches

The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3) and [v0.26.7](https://github.com/decidim/decidim/releases/tag/v0.26.7)
GitHub Security Advisory: GHSA-vc79-65pr-q82v
Package: rswag (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: < 2.10.1
Patched in: 2.10.1

Summary: rswag vulnerable to arbitrary JSON and YAML file read via directory traversal

Details:
rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI (or Swagger) specification file of a project.
GitHub Security Advisory: GHSA-5652-92r9-3fx9
Package: decidim-core (RUBYGEMS)
Severity: HIGH (CVSS 8.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 0.27.0, < 0.27.3
Patched in: 0.27.3

Summary: Decidim Cross-site Scripting vulnerability in the processes filter

Details:
### Impact

The processes filter feature is susceptible to Cross-site scripting. This allows a remote attacker to execute JavaScript code in the context of a currently logged-in user. An attacker could use this vulnerability to make other users endorse or support proposals they have no intention of supporting or endorsing.

### Patches

The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3) and [v0.26.7](https://github.com/decidim/decidim/releases/tag/v0.26.7)
GitHub Security Advisory: GHSA-5652-92r9-3fx9
Package: decidim (RUBYGEMS)
Severity: HIGH (CVSS 8.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 0.27.0, < 0.27.3
Patched in: 0.27.3

Summary: Decidim Cross-site Scripting vulnerability in the processes filter

Details:
### Impact

The processes filter feature is susceptible to Cross-site scripting. This allows a remote attacker to execute JavaScript code in the context of a currently logged-in user. An attacker could use this vulnerability to make other users endorse or support proposals they have no intention of supporting or endorsing.

### Patches

The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3) and [v0.26.7](https://github.com/decidim/decidim/releases/tag/v0.26.7)
GitHub Security Advisory: GHSA-469h-mqg8-535r
Package: decidim (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 0.27.0, < 0.27.3
Patched in: 0.27.3

Summary: Decidim Cross-site Scripting vulnerability in the external link redirections

Details:
### Impact

The external link feature is susceptible to Cross-site scripting. This allows a remote attacker to execute JavaScript code in the context of a currently logged-in user. An attacker could use this vulnerability to make other users endorse or support proposals they have no intention of supporting or endorsing.

### Patches

The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3) and [v0.26.7](https://github.com/decidim/decidim/releases/tag/v0.26.7)
GitHub Security Advisory: GHSA-469h-mqg8-535r
Package: decidim-core (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 0.27.0, < 0.27.3
Patched in: 0.27.3

Summary: Decidim Cross-site Scripting vulnerability in the external link redirections

Details:
### Impact

The external link feature is susceptible to Cross-site scripting. This allows a remote attacker to execute JavaScript code in the context of a currently logged-in user. An attacker could use this vulnerability to make other users endorse or support proposals they have no intention of supporting or endorsing.

### Patches

The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3) and [v0.26.7](https://github.com/decidim/decidim/releases/tag/v0.26.7)
GitHub Security Advisory: GHSA-jm79-9pm4-vrw9
Package: decidim-meetings (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: >= 0.27.0, < 0.27.3
Patched in: 0.27.3

Summary: Decidim vulnerable to sensitive data disclosure

Details:
Note: added the actual report as a [comment](https://github.com/decidim/decidim/security/advisories/GHSA-jm79-9pm4-vrw9#advisory-comment-81110).

### Summary

Decidim, a platform for digital citizen participation, uses a third-party library named Ransack for filtering certain database collections (e.g., public meetings). By default, this library allows filtering on all data attributes and associations. This allows an unauthenticated remote attacker to exfiltrate non-public data from the underlying database of a Decidim instance (e.g., exfiltrating data from the user table).

### Impact
This issue may lead to Sensitive Data Disclosure.

### Patches
The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3).

### Workarounds
Disable or unpublish all meetings components from your application.
GitHub Security Advisory: GHSA-jm79-9pm4-vrw9
Package: decidim (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: >= 0.27.0, < 0.27.3
Patched in: 0.27.3

Summary: Decidim vulnerable to sensitive data disclosure

Details:
Note: added the actual report as a [comment](https://github.com/decidim/decidim/security/advisories/GHSA-jm79-9pm4-vrw9#advisory-comment-81110).

### Summary

Decidim, a platform for digital citizen participation, uses a third-party library named Ransack for filtering certain database collections (e.g., public meetings). By default, this library allows filtering on all data attributes and associations. This allows an unauthenticated remote attacker to exfiltrate non-public data from the underlying database of a Decidim instance (e.g., exfiltrating data from the user table).

### Impact
This issue may lead to Sensitive Data Disclosure.

### Patches
The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3).

### Workarounds
Disable or unpublish all meetings components from your application.
GitHub Security Advisory: GHSA-vmfx-gcfq-wvm2
Package: nokogiri (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-787: Out-of-bounds Write, CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
Vulnerable versions: < 1.10.5
Patched in: 1.10.5

Summary: Nokogiri implementation of libxslt vulnerable to heap corruption

Details:
Type confusion in `xsltNumberFormatGetMultipleLevel` prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.

Nokogiri prior to version 1.10.5 contains a vulnerable version of libxslt. Nokogiri version 1.10.5 upgrades the dependency to libxslt 1.1.34, which contains a patch for this issue.
GitHub Security Advisory: GHSA-242x-7cm6-4w8j
Package: nokogiri (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-416: Use After Free, CWE-908: Use of Uninitialized Resource
Vulnerable versions: < 1.10.5
Patched in: 1.10.5

Summary: Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability

Details:
In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.

Nokogiri prior to version 1.10.5 contains a vulnerable version of libxslt. Nokogiri version 1.10.5 upgrades the dependency to libxslt 1.1.34, which contains a patch for this issue.
GitHub Security Advisory: GHSA-f5ww-cq3m-q3g7
Package: sanitize (RUBYGEMS)
Severity: HIGH (CVSS 7.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 3.0.0, < 6.0.2
Patched in: 6.0.2

Summary: Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content

Details:
### Impact

Using carefully crafted input, an attacker may be able to sneak arbitrary HTML and CSS through Sanitize `>= 3.0.0, < 6.0.2` when Sanitize is configured to use the built-in "relaxed" config or when using a custom config that allows `style` elements and one or more CSS at-rules. This could result in XSS (cross-site scripting) or other undesired behavior when the malicious HTML and CSS are rendered in a browser.

### Patches

Sanitize `>= 6.0.2` performs additional escaping of CSS in `style` element content, which fixes this issue.

### Workarounds

Users who are unable to upgrade can prevent this issue by using a Sanitize config that doesn't allow `style` elements, using a Sanitize config that doesn't allow CSS at-rules, or by manually escaping the character sequence `</` as `<\/` in `style` element content.

### Credit

This issue was found by @cure53 during an audit of a project that uses Sanitize and was reported by one of that project's maintainers. Thank you!
GitHub Security Advisory: GHSA-2pqj-h3vj-pqgw
Package: jquery-rails (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-64: Windows Shortcut Following (.LNK), CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 2.2.0
Patched in: 2.2.0

Summary: Cross-Site Scripting in jquery

Details:
Affected versions of `jquery` are vulnerable to cross-site scripting. This occurs because the main `jquery` function uses a regular expression to differentiate between HTML and selectors, but does not properly anchor the regular expression. The result is that `jquery` may interpret HTML as selectors when given certain inputs, allowing for client side code execution.

## Proof of Concept
```
$("#log").html(
    $("element[attribute='<img src=\"x\" onerror=\"alert(1)\" />']").html()
);
```




## Recommendation

Update to version 1.9.0 or later.
GitHub Security Advisory: GHSA-v4f8-2847-rwm7
Package: nokogiri (RUBYGEMS)
Severity: HIGH (CVSS 8.8)
CWE: CWE-416: Use After Free
Vulnerable versions: < 1.11.4
Patched in: 1.11.4

Summary: Nokogiri Implements libxml2 version vulnerable to use-after-free

Details:
There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.
GitHub Security Advisory: GHSA-286v-pcf5-25rc
Package: nokogiri (RUBYGEMS)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-476: NULL Pointer Dereference
Vulnerable versions: < 1.11.4
Patched in: 1.11.4

Summary: Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing

Details:
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.
GitHub Security Advisory: GHSA-x5m6-jh4r-34mv
Package: hub (RUBYGEMS)
Severity: MODERATE (CVSS 4.4)
CWE: CWE-377: Insecure Temporary File
Vulnerable versions: < 1.12.1
Patched in: 1.12.1

Summary: Hub Package Arbitrary File Overwrite

Details:
The `am` function in `lib/hub/commands.rb` in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file.
GitHub Security Advisory: GHSA-97wh-6hmj-g8j9
Package: spina (RUBYGEMS)
Severity: LOW (CVSS 3.5)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 2.15.1
Patched in: 2.15.1

Summary: Spina Cross-site Scripting vulnerability

Details:
Cross-site Scripting (XSS) - Stored in GitHub repository spinacms/spina prior to 2.15.1.
GitHub Security Advisory: GHSA-4g8v-vg43-wpgf
Package: actionpack (RUBYGEMS)
Severity: MODERATE (CVSS 4.0)
CWE: CWE-116: Improper Encoding or Escaping of Output
Vulnerable versions: >= 7.0.0, < 7.0.5.1
Patched in: 7.0.5.1

Summary: Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to

Details:
The `redirect_to` method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header. This vulnerability has been assigned the CVE identifier CVE-2023-28362.

Versions Affected: All. Not affected: None Fixed Versions: 7.0.5.1, 6.1.7.4

# Impact

This introduces the potential for a Cross-site-scripting (XSS) payload to be delivered on the now static redirection page. Note that this both requires user interaction and for a Rails app to be configured to allow redirects to external hosts (defaults to false in Rails >= 7.0.x).

# Releases

The FIXED releases are available at the normal locations.

# Workarounds

Avoid providing user supplied URLs with arbitrary schemes to the `redirect_to` method.
GitHub Security Advisory: GHSA-4g8v-vg43-wpgf
Package: actionpack (RUBYGEMS)
Severity: MODERATE (CVSS 4.0)
CWE: CWE-116: Improper Encoding or Escaping of Output
Vulnerable versions: < 6.1.7.4
Patched in: 6.1.7.4

Summary: Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to

Details:
The `redirect_to` method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header. This vulnerability has been assigned the CVE identifier CVE-2023-28362.

Versions Affected: All. Not affected: None Fixed Versions: 7.0.5.1, 6.1.7.4

# Impact

This introduces the potential for a Cross-site-scripting (XSS) payload to be delivered on the now static redirection page. Note that this both requires user interaction and for a Rails app to be configured to allow redirects to external hosts (defaults to false in Rails >= 7.0.x).

# Releases

The FIXED releases are available at the normal locations.

# Workarounds

Avoid providing user supplied URLs with arbitrary schemes to the `redirect_to` method.
GitHub Security Advisory: GHSA-59gp-qqm7-cw4j
Package: nokogiri (RUBYGEMS)
Severity: HIGH (CVSS 8.8)
CWE: CWE-416: Use After Free
Vulnerable versions: < 1.13.2
Patched in: 1.13.2

Summary: Nokogiri has vulnerable dependencies on libxml2 and libxslt

Details:
Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
GitHub Security Advisory: GHSA-jc36-42cf-vqwj
Package: nokogiri (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-787: Out-of-bounds Write
Vulnerable versions: < 1.13.4
Patched in: 1.13.4

Summary: Nokogiri affected by zlib's Out-of-bounds Write vulnerability

Details:
zlib 1.2.11 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
GitHub Security Advisory: GHSA-jvgm-pfqv-887x
Package: bundler (RUBYGEMS)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: >= 1.0.0, < 2.0.0
Patched in: 2.0.0

Summary: Bundler allows attacker to inject arbitrary code via secondary Gem source

Details:
Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source.  NOTE: this might overlap CVE-2013-0334.
GitHub Security Advisory: GHSA-v9v4-7jp6-8c73
Package: activesupport (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 3.0.0, < 3.0.7
Patched in: 3.0.8

Summary: rails Cross-site Scripting vulnerability

Details:
The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a problematic string method, as demonstrated by the sub method.
GitHub Security Advisory: GHSA-v9v4-7jp6-8c73
Package: activesupport (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 2.0.0, < 2.3.11
Patched in: 2.3.12

Summary: rails Cross-site Scripting vulnerability

Details:
The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a problematic string method, as demonstrated by the sub method.
GitHub Security Advisory: GHSA-v9v4-7jp6-8c73
Package: actionpack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 3.0.0, < 3.0.7
Patched in: 3.0.8

Summary: rails Cross-site Scripting vulnerability

Details:
The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a problematic string method, as demonstrated by the sub method.
GitHub Security Advisory: GHSA-v9v4-7jp6-8c73
Package: actionpack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 2.0.0, < 2.3.11
Patched in: 2.3.12

Summary: rails Cross-site Scripting vulnerability

Details:
The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a problematic string method, as demonstrated by the sub method.
GitHub Security Advisory: GHSA-8qrh-h9m2-5fvf
Package: activesupport (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 2.3.0, < 2.3.4
Patched in: 2.3.4

Summary: Cross site scripting that affects rails

Details:
Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.
GitHub Security Advisory: GHSA-8qrh-h9m2-5fvf
Package: activesupport (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 2.0.0, < 2.2.3
Patched in: 2.2.3

Summary: Cross site scripting that affects rails

Details:
Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.
GitHub Security Advisory: GHSA-8qrh-h9m2-5fvf
Package: actionpack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 2.3.0, < 2.3.4
Patched in: 2.3.4

Summary: Cross site scripting that affects rails

Details:
Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.
GitHub Security Advisory: GHSA-8qrh-h9m2-5fvf
Package: actionpack (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 2.0.0, < 2.2.3
Patched in: 2.2.3

Summary: Cross site scripting that affects rails

Details:
Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.
GitHub Security Advisory: GHSA-mmrq-6999-72v8
Package: openssl (RUBYGEMS)
Severity: CRITICAL (CVSS 9.8)
Vulnerable versions: >= 2.1.0, < 2.1.2
Patched in: 2.1.2

Summary: Ruby Openssl Allows Incorrect Value Comparison

Details:
An issue was discovered in the OpenSSL library in Ruby when two `OpenSSL::X509::Name` objects are compared using `==`, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of `==` will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.
GitHub Security Advisory: GHSA-95xq-v4m2-fq3r
Package: gitlab-grit (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-20: Improper Input Validation
Vulnerable versions: < 2.6.1
Patched in: 2.6.1

Summary: GitLab Grit Gem for Ruby contains a flaw allowing arbitrary commands to be executed

Details:
The Grit gem for Ruby, as used in GitLab 5.2 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands, as demonstrated by the search box for the GitLab code search feature.

GitLab Grit Gem for Ruby contains a flaw in the app/contexts/search_context.rb script. The issue is triggered when input passed via the code search box is not properly sanitized, which allows strings to be evaluated by the shell. This may allow a remote attacker to execute arbitrary commands.