Product
The rubygem-safemode library contains a sandbox escape vulnerability where compound assignment expressions are not subjected to Jail allow-list validation, allowing authenticated attackers to execute arbitrary no-argument methods.