https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:18:01.431701+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-5946 CVE-2017-5946 2026-10-03T22:18:01.434043+00:00

The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem.

 https://cve.radiocsirt.org/vuln/ghsa-gcqq-w6gr-h9j9 GHSA-gcqq-w6gr-h9j9 — Directory traversal vulnerability in RubyZip 2026-10-03T22:18:01.434096+00:00

Affected: RubyGems: rubyzip

The `Zip::File` component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses `../` pathname substrings to write arbitrary files to the filesystem.