Advisories for Gem/Rake package

There is an OS command injection vulnerability in Ruby Rake in Rake::FileList when supplying a filename that begins with the pipe character |.