https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 19:43:39 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2023-26153 <p>Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the &#39;geo_location&#39; cookie. This issue can be exploited remotely via a malicious cookie value. **Note:** An attacker can use this vulnerability to execute commands on the host system.</p> <p>Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the &#39;geo_location&#39; cookie. This issue can be exploited remotely via a malicious cookie value. **Note:** An attacker can use this vulnerability to execute commands on the host system.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2023-26153 https://vulnerability.circl.lu/vuln/ghsa-7xvc-v44j-46fh <p><strong>Affected:</strong> RubyGems: geokit-rails</p> <p>Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the &#39;geo_location&#39; cookie. This issue can be exploited remotely via a malicious cookie value.</p> <p>**Note:**</p> <p>An attacker can use this vulnerability to execute commands on the host system.</p> <p><strong>Affected:</strong> RubyGems: geokit-rails</p> <p>Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the &#39;geo_location&#39; cookie. This issue can be exploited remotely via a malicious cookie value.</p> <p>**Note:**</p> <p>An attacker can use this vulnerability to execute commands on the host system.</p> https://vulnerability.circl.lu/vuln/ghsa-7xvc-v44j-46fh https://vulnerability.circl.lu/vuln/gsd-2023-26153 gsd-2023-26153 https://vulnerability.circl.lu/vuln/gsd-2023-26153