rubyonrails Thor

• CVE-2025-54314 Low 2.8 Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlle 0.2%