rubyzip vulnerabilities (RubyGems)

4 vulnerabilities.

• rubyzip RubyGems rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix CVE-2026-85396 Fix available 8.7 HighSeptember 3, 2026
• rubyzip RubyGems Rubyzip denial of service CVE-2019-16892 Fix available 5.5 MediumSeptember 25, 2019
• rubyzip RubyGems Rubyzip gem contains a Directory Traversal vulnerability in zip file component CVE-2018-1000544 Fix available 9.8 CriticalJune 26, 2018
• rubyzip RubyGems Directory traversal vulnerability in RubyZip CVE-2017-5946 Fix available 9.8 CriticalFebruary 27, 2017