Headline
CVE-2021-41078: Build software better, together
Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file.
Related news
CVE-2021-28966: HackerOne
In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.