https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 15:21:18 +0000 https://vulnerability.circl.lu/sighting/fbabf1a2-ddc3-4318-9a07-dd5f4f72a85e/export {"uuid": "fbabf1a2-ddc3-4318-9a07-dd5f4f72a85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67986", "type": "seen", "source": "https://gist.github.com/Zykis1024/21b13ddabf1a7d9707fd573518cefa71", "content": "# CVE-2026-67986\n\nAffected product:\namazing-print/amazing_print\n\nAffected version:\nGit commit dc890dfafdf07088ea901df53c19c2710e5c5234\n\nReleased version range:\nNot yet determined.\n\nVulnerability type:\nRuby Code Injection (CWE-94)\n\nAffected component:\nAwesomeMethodArray#grep\n\nDescription:\namazing-print/amazing_print at commit\ndc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby\ncode injection condition in AwesomeMethodArray#grep. A specially\nnamed method containing Ruby interpolation syntax can be interpolated\ninto a dynamically constructed eval string when grep is called with\na block, resulting in Ruby code execution in the host process.\nExploitation requires an application path that allows an attacker\nto influence dynamic method names.\n\nReferences:\nhttps://github.com/amazing-print/amazing_print\nhttps://github.com/amazing-print/amazing_print/blob/dc890dfafdf07088ea901df53c19c2710e5c5234/lib/amazing_print/core_ext/awesome_method_array.rb#L71\n", "creation_timestamp": "2026-08-13T04:22:55.692941Z"} {"uuid": "fbabf1a2-ddc3-4318-9a07-dd5f4f72a85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67986", "type": "seen", "source": "https://gist.github.com/Zykis1024/21b13ddabf1a7d9707fd573518cefa71", "content": "# CVE-2026-67986\n\nAffected product:\namazing-print/amazing_print\n\nAffected version:\nGit commit dc890dfafdf07088ea901df53c19c2710e5c5234\n\nReleased version range:\nNot yet determined.\n\nVulnerability type:\nRuby Code Injection (CWE-94)\n\nAffected component:\nAwesomeMethodArray#grep\n\nDescription:\namazing-print/amazing_print at commit\ndc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby\ncode injection condition in AwesomeMethodArray#grep. A specially\nnamed method containing Ruby interpolation syntax can be interpolated\ninto a dynamically constructed eval string when grep is called with\na block, resulting in Ruby code execution in the host process.\nExploitation requires an application path that allows an attacker\nto influence dynamic method names.\n\nReferences:\nhttps://github.com/amazing-print/amazing_print\nhttps://github.com/amazing-print/amazing_print/blob/dc890dfafdf07088ea901df53c19c2710e5c5234/lib/amazing_print/core_ext/awesome_method_array.rb#L71\n", "creation_timestamp": "2026-08-13T04:22:55.692941Z"} https://vulnerability.circl.lu/sighting/fbabf1a2-ddc3-4318-9a07-dd5f4f72a85e/export Thu, 13 Aug 2026 04:22:55 +0000