Threats tagged 'ghsa-7w38-ggh5-v542'

Elo's Ruby backend suffers from a critical remote code execution vulnerability due to improper escaping of the '#' character in emitted Ruby double-quoted strings. This allows attacker-controlled input to be interpreted as Ruby interpolation sequences, enabling execution of arbitrary Ruby code and shell commands via backticks. The flaw affects the string literal emitter and subtype-constraint label emission paths, leading to server-side RCE in multiple contexts including the elo-lang.org playground, CLI usage, and downstream integrations. The vulnerability is fixed in Elo version 1.0.1.