← Back to CVE List
CVE-2017-0899
RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt