description: There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.
problem types: OS Command Injection (CWE-78)
affected:
{
product: https://github.com/ruby/ruby
vendor: n/a
versions:
status: affected, version: Fixed in Rake 12.3.3
}