Vulnerabilities in RDoc and StringIO