lib/string_utf_support.rb
in the Arabic Prawn 0.0.1 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) downloaded_file or (2) url variable.
{ "github_reviewed_at": "2020-06-16T21:40:12Z", "severity": "HIGH", "cwe_ids": [], "github_reviewed": true, "nvd_published_at": "2014-05-02T14:55:07Z" }