The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.02351·Published 2019-10-09·Fixed in 2.0.4, 1.5.3CWE-276
