GitHub Advisory Database4 days ago
Elo Ruby backend has Remote Code Execution via unescaped #{...} interpolation in emitted string literals and subtype-constraint labels
Summary Elo's Ruby backend emits attacker-controlled text into Ruby double-quoted strings without escaping the # character. Because # begins Ruby's interpolation sequences — #{expr}, #@ivar, #@@cvar, #$gvar — and any expression wrapped in #{...} may use backticks for shell execut
Published November 3, 2026 · 5:51 PM
Summary Elo's Ruby backend emits attacker-controlled text into Ruby double-quoted strings without escaping the # character. Because # begins Ruby's interpolation sequences — #{expr}, #@ivar, #@@cvar, #$gvar — and any expression wrapped in #{...} may use backticks for shell execut
Source: GitHub Advisory Database
Ask AI about this articleBeta
The AI only has access to this article — it won't make up facts. Try:
Supporting evidence0 items
Community check0 comments
No votes yet
0% real0% fake