Skip to content
OpenAdvisories

Package · Ubuntu

ruby-zip

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2019-16892

    Rubyzip denial of service

    In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk consumption).

    rubyzip ruby-zip ruby-zip Debian Ubuntu RubyGems