The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the speak, save, bytes or bytes_wav method in lib/espeak/speech.rb.
CVSS 3.0CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.02448·Published 2017-03-03·Fixed in 1.0.3CWE-284