CVE-2026-67986

Name of the Vulnerable Software and Affected Versions amazing-print versions prior to dc890dfafdf07088ea901df53c19c2710e5c5234

Description A Ruby code injection condition exists in the AwesomeMethodArray#grep() function. When grep is called with a block, a method name containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string, leading to arbitrary code execution in the host process. This requires an application path where an attacker can influence dynamic method names.

Recommendations Update amazing-print to commit dc890dfafdf07088ea901df53c19c2710e5c5234 or a newer version.