Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE in helper method dispatch, where it uses Kernel::send to call helpers without checking that they are defined within the template context first. This allows expressions such as system "ls" or eval "puts 1 + 1" t...