From: ./lynx-0.2.0/lib/lynx/pipe/get.rb Doesn't properly sanitize user input before sending to command line: From: lynx/blob/master/lib/lynx/pipe/run.rb module Lynx module Pipe class Run < Basic def perform(command) system(command.to_s) end end end end lynx Gem for Ruby contains a flaw in command/basic.rb that is due to the application exposing password information in plaintext in the process table. This may allow a local attacker to gain access to password information. From:lynx/blob/master/lib/lynx/command/basic.rb @command << "--password=#{config.password}" if config.password 04- module Pipe 6- def perform(command) 7: `#{command}`.strip 8- end 9- end 10- end