CVE-2017-0899 - AskarLabs CVE Database

CVE-2017-0899

Vendor Hackerone

Product RubyGems

Weakness CWE-150

Published August 31, 2017

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.

Key dates

02Disclosure timeline

August 31, 2017 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-0899 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/150.html

Related vulnerabilities

04Related CVE

CVE-2025-62845 QuRouter CVE-2026-47090 Claude HUD 0.0.12 Terminal Injection via OSC 8 Hyperlinks CVE-2024-47252 Apache HTTP Server: mod_ssl error log variable escaping CVE-2026-25996 Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode CVE-2026-21439 badkeys vulnerable to ASCII control character injection on console via malformed input