EUVD-2017-0354

Malware in sbrugna...

RuboCop Arbitrary Cache File Modification Vulnerability

RuboCop is a Ruby static code analyzer . With the ability to find and resolve code errors. A security vulnerability exists in RuboCop 0.48.1 and earlier versions. A local attacker can exploit the vulnerability to tamper with other users' cached files...

CVE-2017-8418: Exposure of Resource to Wrong Sphere

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users...