https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T18:09:53.920305+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2023-26153 fkie_cve-2023-26153 2026-09-29T18:09:54.058366+00:00

Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the 'geo_location' cookie. This issue can be exploited remotely via a malicious cookie value. **Note:** An attacker can use this vulnerability to execute commands on the host system.

 https://vulnerability.circl.lu/vuln/ghsa-7xvc-v44j-46fh GHSA-7xvc-v44j-46fh — geokit-rails Command Injection vulnerability 2026-09-29T18:09:54.058463+00:00

Affected: RubyGems: geokit-rails

Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the 'geo_location' cookie. This issue can be exploited remotely via a malicious cookie value.

**Note:**

An attacker can use this vulnerability to execute commands on the host system.

 https://vulnerability.circl.lu/vuln/gsd-2023-26153 gsd-2023-26153 2026-09-29T18:09:54.058521+00:00 gsd-2023-26153