Most recent entries from all

Withdrawn: BELL-CVE-2021-28966 — CVE-2021-28966 does not affect BellSoft software

Withdrawn by the publisher.

BIT-ruby-2021-28966

Affected: Bitnami: ruby

In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.

CLEANSTART-2026-YW10276 — Security fix for CVE-2021-28966 applied in: ruby 2.7.3-r0

Affected: CleanStart: ruby

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-26147

fkie_cve-2021-28966

In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.

GHSA-46f2-3v63-3xrp — Tempfile on Windows path traversal vulnerability

Affected: RubyGems: tmpdir

There is an unintentional directory creation vulnerability in `tmpdir` library bundled with Ruby on Windows. And there is also an unintentional file creation vulnerability in tempfile library bundled with Ruby on Windows, because it uses tmpdir internally.

gsd-2021-28966

WID-SEC-W-2023-2462 — Ruby: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Dateien zu manipulieren.