{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/enspirit/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-44266"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-44266\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":[],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Enspirit"],"content_html":"\u003cp\u003eElo, a functional expression language, contains a vulnerability in its Ruby backend (src/compilers/ruby.ts). Attacker-controlled text is embedded into Ruby double-quoted strings without escaping '#', allowing Ruby interpolation to become executable. A failing labelled subtype constraint or an ordinary string literal can lead to Ruby code and shell command execution via backticks. Affected entry points include the /try playground (Ruby target), bin/eloc -t ruby -x, and defaultFormats.elo.parse() followed by Ruby emission. This issue is fixed in version 1.0.1.\u003c/p\u003e\n","date_modified":"2026-11-03T20:15:41Z","date_published":"2026-11-03T20:02:10Z","id":"https://feed.craftedsignal.io/briefs/2026-11-elo-ruby-code-injection/","summary":"Elo versions prior to 1.0.1 are vulnerable to arbitrary code execution in the Ruby backend due to improper escaping of input within Ruby double-quoted strings.","title":"Elo: Ruby backend arbitrary code execution (CVE-2026-44266)","url":"https://feed.craftedsignal.io/briefs/2026-11-elo-ruby-code-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Enspirit","version":"https://jsonfeed.org/version/1.1"}