Rubyzip Project / Rubyzip

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-85396	rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix	HIGH	8.7	Sep 3, 2026
CVE-2019-16892	cfme: rubygem-rubyzip denial of service via crafted ZIP file	MEDIUM	5.5	Sep 25, 2019
CVE-2018-1000544	rubyzip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file	CRITICAL	9.8	Jun 26, 2018
CVE-2017-5946	rubygem-rubyzip: Directory traversal in the Zip::File component	CRITICAL	9.8	Feb 27, 2017

Rows per page

Showing 1 to 4 of 4 CVEs