Browse cwe for ruby with official CWE context and Glexia analysis.
Search And Filters
Showing 3 of 3 CWE records.
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
The product receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified.
