CVE-2021-3779

CVE-2021-3779 affects the ruby-mysql RubyGem prior to 2.10.0, enabling a malicious MySQL server to request local file content from a client. The root cause is unsafe handling that allows a server to access local files on the client, not from the server. The issue is fixed in ruby-mysql 2.10.0 and...