rubyzip

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

rubyzip records in CISA KEV

No rubyzip vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-58604 CVE-2026-85396 · GHSA-47m2-wp7j-p9vc

rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix

MEDIUM 44

rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that fails to properly validate extraction paths using prefix comparison without trailing separators.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00564 Published 2026-09-03 Fixed in 3.4.0 CWE-22

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0