Severity: Critical
CVSS Score: 9.8
The karo gem 2.3.8 for Ruby allows Remote command injection via the host field.