Known CVE vulnerabilities and GitHub Security Advisories affecting the RubyGems package sup, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (2)
CVE-2013-4478 — CVSS 6.8 (medium): Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the…
CVE-2013-4479 — CVSS 6.8 (medium): lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell…