mini_magick is a ruby wrapper for ImageMagick or GraphicsMagick command line.
Affected versions of this package are vulnerable to Remote Code Execution.
A fetched remote image filename can cause remote command execution due to
Image.open input being directly passed to
Kernel#open, which accepts a
| character followed by a command.
mini_magick to version 4.9.4 or higher.