Advisories for Gem/Gyazo package

2018

Command injection vulnerability

If this Gem is used in the context of a RoR app a malicious user may inject commands via #{imagefile} and #{tmpfile} using shell meta characters like ; and sending an escaped " if the raw option is not set.