CVE-2015-7541: Colorscore Project Colorscore

Critical severity, CVSS 10.0. EPSS: 3.5% chance of exploitation in the next 30 days.

The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path, (2) colors, or (3) depth variable.

Affected products

• Colorscore Project Colorscore: up to and including 0.0.4

Published 2016-01-08. Last modified 2026-06-17.