5538 matches found
bomber
bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...
abhinavagarwal07.github.io
Chirpy Starter Al instalar el tema Chirpy a través de RubyGems.org, Jekyll solo puede leer los archivos de las carpetas data, layouts, includes, sass y assets, así como una pequeña parte de las opciones del archivo config.yml de la gema del tema. Si alguna vez has instalado esta gema del tema,...
CVE-2026-82455
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
Linux Distros Unpatched Vulnerability : CVE-2026-82455
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination...
CVE-2026-82455
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
CVE-2026-82455 RubyGems before 4.0.13 Path Traversal via Symlink Resolution
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
CVE-2026-82455 RubyGems before 4.0.13 Path Traversal via Symlink Resolution
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
CVE-2026-82455
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
CVE-2026-82455
RubyGems versions before 4.0.13 are vulnerable to a path traversal issue during gem extraction. The root cause is a failure to re-validate path containment after filesystem symlink resolution : if a pre-existing symlink inside the destination directory points outside the extraction root, extracte...
EUVD-2026-68102
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
Malicious code in micro-max-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15728 Malicious code in micro-fast-mod (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15729 Malicious code in micro-lite-pkg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in micro-fast-mod (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in micro-lite-pkg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in micro-fast-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15727 Malicious code in micro-fast-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15726 Malicious code in micro-clean-gem (RubyGems)
--- -= Per source details. Do not edit below this line.=-...