Advisories for Gem/Kajam package

2018
2014

Arbitrary code execution

There is a flaw in /dataset/lib/dataset/database/postgresql.rb that is triggered when handling metacharacters. This may allow a remote attacker to execute arbitrary commands.