The self.run_gpg function in lib/rgpg/gpg_helper.rb in the rgpg gem before 0.2.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.
CVSS 2.0HIGH 7.5·Network·No auth·Interaction —·EPSS 0.02075·Published 2013-10-11·Fixed in 0.2.3CWE-94