GHSA-q66h-m87m-j2q6: Bitcoinrb Vulnerable to Command injection via RPC

February 10, 2026

Unsafe handling of request parameters in the RPC HTTP server results in command injection

References

github.com/advisories/GHSA-q66h-m87m-j2q6
github.com/chaintope/bitcoinrb
github.com/chaintope/bitcoinrb/commit/070327133a2a3e5a6d265b2d82f06f9414c01e74
github.com/chaintope/bitcoinrb/releases/tag/v1.12.0
github.com/chaintope/bitcoinrb/security/advisories/GHSA-q66h-m87m-j2q6

Code Behaviors & Features

Detect and mitigate GHSA-q66h-m87m-j2q6 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →