CVE-2021-31799: Debian Linux

High severity, CVSS 7.0. EPSS: 1.5% chance of exploitation in the next 30 days.

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only
• Oracle Jd Edwards Enterpriseone Tools: before 9.2.6.1 (fixed in 9.2.6.1)
• Ruby-Lang Rdoc: from 3.11, before 6.3.1 (fixed in 6.3.1)

Published 2021-07-30. Last modified 2026-06-17.