CVE-2019-10780

CVE-2019-10780 affects BibTeX-Ruby prior to 5.1.0. The vulnerability arises when untrusted input is passed directly to the built-in Ruby Kernel.open via BibTeX.open, enabling OS command injection. Multiple sources (Red Hat, GitHub advisories, OSV/Veracode, NVD) corroborate the issue and its descr...