CVE-2022-36231: Code injection in pdf_info

Severity: Critical

CVSS Score: 9.8

pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.