CVE-2022-29218

RubyGems is a package registry used to supply software for the Ruby language ecosystem. An ordering mistake in the code that accepts gem uploads allowed some gems with platforms ending in numbers, like "arm64-darwin-21" to be temporarily replaced in the CDN cache by a malicious package. The bug h...