critical9.8
CVE-2021-35514
Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel.
Impact
Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Narou Project | Narou | before 3.8.0 |