A plain gem install can run arbitrary code. RubyGems trust policies guard against it, MediumSecurity is the sane default. Most popular gems are unsigned though. go.fastruby.io/ksq #RubyGems #AppSec

0 likes 0 replies