Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

rubyzip

Ecosystem:
rubygems
Package URL:
pkg:gem/rubyzip
Total PRs:
682 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
235 repositories
Unique Repos (30 days):
0 repositories
Security Advisories
Rubyzip gem contains a Directory Traversal vulnerability in zip file component
GHSA-vqcq-mrmw-mcmg CVE-2018-1000544 CRITICAL published almost 8 years ago • updated about 21 hours ago
rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrar...
Rubyzip denial of service
GHSA-5m2v-hc64-56h6 CVE-2019-16892 MODERATE published over 6 years ago • updated about 21 hours ago
In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofe...
Directory traversal vulnerability in RubyZip
GHSA-gcqq-w6gr-h9j9 CVE-2017-5946 CRITICAL published over 8 years ago • updated about 21 hours ago
The `Zip::File` component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip file...
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump rubyzip from 3.0.1 to 3.0.2

rhannequin/astronoby #206

3.0.1 → 3.0.2 Patch PR
Open 10 months ago
rhannequin
Bump rubyzip from 3.0.1 to 3.0.2

DFE-Digital/register-trainee-teachers #5534

3.0.1 → 3.0.2 Patch PR
Open 10 months ago 2 comments
DFE-Digital
Bump rubyzip from 3.0.1 to 3.0.2

ledermann/pingcrm #3435

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
ledermann
Bump rubyzip from 3.0.1 to 3.0.2

ddbj/submission-mss #1145

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
ddbj
Bump rubyzip from 3.0.1 to 3.0.2

nhsuk/manage-vaccinations-in-schools #4372

3.0.1 → 3.0.2 Patch PR
Open 10 months ago 1 comment
nhsuk
Bump rubyzip from 3.0.0.rc2 to 3.0.2

wasafiri/vulcan #73

3.0.0.rc2 → 3.0.2 Patch PR
Open 10 months ago
wasafiri
chore(deps): bump rubyzip from 3.0.1 to 3.0.2

cal-itp/calitp.org #487

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago 1 comment
cal-itp
Build(deps-dev): Bump rubyzip from 3.0.1 to 3.0.2

abtion/abtion-secret #2445

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
abtion
chore(deps): bump rubyzip from 3.0.1 to 3.0.2

cal-itp/mobility-marketplace #688

3.0.1 → 3.0.2 Patch PR
Open 10 months ago 1 comment
cal-itp
Bump rubyzip from 3.0.1 to 3.0.2

errbit/errbit #2175

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
errbit
Bump rubyzip from 3.0.1 to 3.0.2

o19s/quepid #1453

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
o19s
Bump rubyzip from 3.0.1 to 3.0.2

codeforamerica/asap_pdf #277

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
codeforamerica
build(deps): bump rubyzip from 3.0.1 to 3.0.2

cloudfoundry/cloud_controller_ng #4526

3.0.1 → 3.0.2 Patch PR
Open 10 months ago
cloudfoundry
build(deps-dev): bump rubyzip from 3.0.1 to 3.0.2

abtion/rails-template #2972

3.0.1 → 3.0.2 Patch PR
Open 10 months ago
abtion
Bump rubyzip from 3.0.1 to 3.0.2

crimethinc/website #4802

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
crimethinc
Bump rubyzip from 3.0.1 to 3.0.2

EventideSystems/decidodeck #1256

3.0.1 → 3.0.2 Patch PR
Open 10 months ago
EventideSystems
Bump rubyzip from 3.0.0.rc2 to 3.0.1

wasafiri/vulcan #66

3.0.0.rc2 → 3.0.1 Patch PR
Closed 10 months ago 1 comment
wasafiri
Bump rubyzip from 3.0.0 to 3.0.1

kddnewton/exreg #48

3.0.0 → 3.0.1 Patch PR
Merged 10 months ago
kddnewton
chore(deps): bump rubyzip from 3.0.0 to 3.0.1

DFE-Digital/register-early-career-teachers-public #1130

3.0.0 → 3.0.1 Patch PR
Open 10 months ago 1 comment
DFE-Digital
Bump rubyzip from 3.0.0 to 3.0.1

alphagov/govspeak-preview #728

3.0.0 → 3.0.1 Patch PR
Open 10 months ago
alphagov
build(deps): bump rubyzip from 3.0.0 to 3.0.1

cloudfoundry/cloud_controller_ng #4503

3.0.0 → 3.0.1 Patch PR
Open 10 months ago
cloudfoundry
Bump the bundler group with 5 updates

cooljeanius/diaspora #475

3.0.0 → 3.0.1 Patch PR
Merged 10 months ago
cooljeanius
Bump the semver_updates group with 8 updates

botandrosedesign/rw24 #135

3.0.0 → 3.0.1 Patch PR
Open 10 months ago
botandrosedesign
Bump rubyzip from 3.0.0 to 3.0.1

alphagov/locations-api #684

3.0.0 → 3.0.1 Patch PR
Open 10 months ago
alphagov
Bump rubyzip from 3.0.0 to 3.0.1

rhannequin/astronoby #202

3.0.0 → 3.0.1 Patch PR
Merged 10 months ago
rhannequin
Bump rubyzip from 3.0.0 to 3.0.1

MushroomObserver/mushroom-observer #3171

3.0.0 → 3.0.1 Patch PR
Open 10 months ago
MushroomObserver
Bump the ruby group with 3 updates

getgauge/gauge-ruby #416

3.0.0 → 3.0.1 Patch PR
Merged 10 months ago
getgauge
Bump rubyzip from 3.0.0 to 3.0.1

ddbj/submission-mss #1123

3.0.0 → 3.0.1 Patch PR
Merged 10 months ago
ddbj
Package Details
Name: rubyzip
Ecosystem: rubygems
PURL Type: gem
Package URL: pkg:gem/rubyzip
JSON API: View JSON
Security Advisories

3

Active advisories
CRITICAL 2
MODERATE 1
View All gem Advisories
Package Information
Description:

rubyzip is a ruby module for reading and writing zip files

Repository: https://github.com/rubyzip/rubyzip
Homepage: http://github.com/rubyzip/rubyzip
Latest Release: 2.4.1
over 1 year ago
Dependent Repos: 671,154
Dependent Packages: 1,245
Downloads: 604,871,948
Ranking: Top 0.0212% by dependent repos Top 0.0279% by downloads Top 0.0418% by dependent pkgs
PR Status
Open 281 (41.2%)
Merged 112 (16.4%)
Closed 277 (40.6%)
PR Types
Major 364 (53.4%)
Minor 143 (21.0%)
Patch 128 (18.8%)