Ruby-arr-pm Project Ruby-arr-pm — known CVE vulnerabilities

Every CVE whose affected-product data names Ruby-arr-pm Project Ruby-arr-pm, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2022-39224 — CVSS 7.0 (high): Arr-pm is an RPM reader/writer library written in Ruby. Versions prior to 0.0.12 are subject to OS command injection resulting in shell…