All rules →
Rules / Ruby
SHIELD-RUBY-007

Code injection via eval

criticalRubyCWE-95CVSS 9.8

What it detects

Passing a variable or interpolated string to eval executes arbitrary Ruby code.

How to fix

Avoid eval on dynamic input; use a safe dispatch table or whitelist of allowed operations.

Scan your repo freeFull documentation
Back to all rules
SHIELD-RUBY-007: Code injection via eval — Zennoxa Shield