lib/curl.rb in the Curl Gem for Ruby allows remote malicious users to execute arbitrary commands via shell metacharacters in a URL.
curl project curl -