CVE-2026-82455

creationtimestamp| type| source ---|---|--- 2026-08-30 14:14:07+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mucla5oy2i2u 2026-08-30 14:14:07+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117184872053767652...

DEBIAN-CVE-2026-82455

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...