Lucene search
+L

20 matches found

OSV
OSV
added 2026/08/29 2:16 p.m.6 views

AZL-98403 CVE-2026-82455 affecting package ruby 3.3.5-9

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...

5.8AI score0.00144EPSS
SaveExploits0References1
Rows per page
Query Builder