CVE-2026-82455

RubyGems versions before 4.0.13 are vulnerable to a path traversal issue during gem extraction. The root cause is a failure to re-validate path containment after filesystem symlink resolution : if a pre-existing symlink inside the destination directory points outside the extraction root, extracte...