Most recent entries from all

Withdrawn: BELL-CVE-2021-28966 — CVE-2021-28966 does not affect BellSoft software

2026-10-04T10:16:17.634913+00:00

Withdrawn by the publisher.

BIT-ruby-2021-28966

2026-10-04T10:16:17.634963+00:00

Affected: Bitnami: ruby

In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.

CLEANSTART-2026-YW10276 — Security fix for CVE-2021-28966 applied in: ruby 2.7.3-r0

2026-10-04T10:16:17.635001+00:00

Affected: CleanStart: ruby

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-26147

2026-10-04T10:16:17.635035+00:00

EUVD-2026-26147

fkie_cve-2021-28966

2026-10-04T10:16:17.635055+00:00

In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.

GHSA-46f2-3v63-3xrp — Tempfile on Windows path traversal vulnerability

2026-10-04T10:16:17.635087+00:00

Affected: RubyGems: tmpdir

There is an unintentional directory creation vulnerability in `tmpdir` library bundled with Ruby on Windows. And there is also an unintentional file creation vulnerability in tempfile library bundled with Ruby on Windows, because it uses tmpdir internally.

gsd-2021-28966

2026-10-04T10:16:17.635120+00:00

gsd-2021-28966

WID-SEC-W-2023-2462 — Ruby: Mehrere Schwachstellen

2026-10-04T10:16:17.635139+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Dateien zu manipulieren.