The vulnerability in amazing-print/amazing_print (commit dc890dfafdf07088ea901df53c19c2710e5c5234) allows Ruby code injection via the AwesomeMethodArray#grep method. When grep is called with a block, method names containing Ruby interpolation syntax can be interpolated into an eval string, enabling execution of arbitrary Ruby code. Successful exploitation depends on the attacker being able to control dynamic method names used by the application.

If exploited, this vulnerability allows an attacker to execute arbitrary Ruby code within the host process, potentially leading to full compromise of the application environment. However, exploitation requires a specific condition where the attacker can influence dynamic method names, which may limit the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using untrusted input to influence dynamic method names in calls to AwesomeMethodArray#grep with blocks. Monitor vendor channels for official patches or updates.