📦 Carrierwave

CarrierWave versions before 1.3.2 and 2.1.1 contain a code injection vulnerability in the #manipulate! method that allows remote code execution. Attackers can craft malicious strings that get executed...