CVE-2021-41816 log

Severity Medium
Remote Yes
Type Arbitrary code execution
A security issue has been found in Ruby before versions 3.0.3 and 2.7.5. A buffer overrun vulnerability was discovered in the cgi gem before versions 0.3.1, 0.2.1 and 0.1.1 when you pass a very large string (> 700 MB) to CGI.escape_html on a platform where long type takes 4 bytes, typically, Windows.
Group Package Affected Fixed Severity Status Ticket
AVG-2582 ruby 3.0.2-2 Medium Not affected