CVE-2019-8322

Name of the Vulnerable Software and Affected Versions: RubyGems versions 2.6 through 3.0.2

Description: An issue in RubyGems allows the gem owner command to output the contents of the API response directly to stdout. This can lead to escape sequence injection if the response is crafted, potentially enabling a remote attacker to compromise data integrity by using a specially formed escape sequence.

Recommendations: For versions 2.6 through 3.0.2, consider disabling the gem owner command until a patch is available to prevent potential escape sequence injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.