important · RCE — Build workers
A crafted gem can execute publisher-controlled code on RubyDoc.info documentation workers.
Affects
RubyDoc.info, the hosted service that automatically builds documentation for packages published through RubyGems.
A publisher places a Ruby payload behind a gem-controlled .yardopts file and requests documentation generation, causing the worker to evaluate the package's build configuration.
Detail and 2 sources
The September 11 report identified more than one hundred public packages using this execution path and preserved payload examples.
RubyDoc.info's current patch state is unknown.