Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

rubyzip

Ecosystem:
rubygems
Package URL:
pkg:gem/rubyzip
Total PRs:
682 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
235 repositories
Unique Repos (30 days):
0 repositories
Security Advisories
Rubyzip gem contains a Directory Traversal vulnerability in zip file component
GHSA-vqcq-mrmw-mcmg CVE-2018-1000544 CRITICAL published almost 8 years ago • updated about 19 hours ago
rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrar...
Rubyzip denial of service
GHSA-5m2v-hc64-56h6 CVE-2019-16892 MODERATE published over 6 years ago • updated about 19 hours ago
In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofe...
Directory traversal vulnerability in RubyZip
GHSA-gcqq-w6gr-h9j9 CVE-2017-5946 CRITICAL published over 8 years ago • updated about 19 hours ago
The `Zip::File` component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip file...
Recent PRs
RSS Feed
Bump rubyzip from 2.4.1 to 3.1.1

Freika/dawarich #1809

2.4.1 → 3.1.1 Major PR
Open 9 months ago 2 comments
Freika
Build(deps): Bump rubyzip from 2.4.1 to 3.1.1

laurentS/alaveteli_not_fork #46

2.4.1 → 3.1.1 Major PR
Open 9 months ago
laurentS
chore(deps): bump rubyzip from 3.1.0 to 3.1.1

cal-itp/mobility-marketplace #705

3.1.0 → 3.1.1 Patch PR
Open 9 months ago
cal-itp
Build(deps-dev): Bump rubyzip from 3.1.0 to 3.1.1

abtion/abtion-secret #2571

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
abtion
Bump rubyzip from 3.1.0 to 3.1.1

beefproject/beef #3407

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
beefproject
build(deps): bump rubyzip from 2.4.1 to 3.1.1

ekaraage/or4cle2 #123

2.4.1 → 3.1.1 Major PR
Open 9 months ago
ekaraage
Bump rubyzip from 3.1.0 to 3.1.1

o19s/quepid #1483

3.1.0 → 3.1.1 Patch PR
Open 9 months ago
o19s
Bump rubyzip from 2.4.1 to 3.1.1

infrablocks/terraform-aws-user #183

2.4.1 → 3.1.1 Major PR
Open 9 months ago
infrablocks
Bump rubyzip from 2.4.1 to 3.1.1

infrablocks/terraform-aws-cross-account-role #178

2.4.1 → 3.1.1 Major PR
Open 9 months ago
infrablocks
Update rubyzip requirement from ~> 2.3 to ~> 3.1

gekola/xlsxwriter-rb #61

~> 2.3 → ~> 3.1
Open 9 months ago
gekola
Bump rubyzip from 3.1.0 to 3.1.1

alphagov/signon #4073

3.1.0 → 3.1.1 Patch PR
Open 9 months ago
alphagov
build(deps): bump rubyzip from 3.1.0 to 3.1.1

cloudfoundry/cloud_controller_ng #4582

3.1.0 → 3.1.1 Patch PR
Open 9 months ago
cloudfoundry
Bump rubyzip from 2.4.1 to 3.1.1

FrancoLadronDeGuevara/ruby-on-rails-inventory #13

2.4.1 → 3.1.1 Major PR
Open 9 months ago
FrancoLadronDeGuevara
Build(deps): Update rubyzip requirement from >= 2.3.2, < 2.5.0 to >= 2.3.2, < 3.2.0

uyuni-project/tetra #373

>= 2.3.2, < 2.5.0 → >= 2.3.2, < 3.2.0
Open 9 months ago 2 comments
uyuni-project
Bump rubyzip from 2.4.1 to 3.1.1

LynchzDEV/rails-auto-printing-feat #27

2.4.1 → 3.1.1 Major PR
Closed 9 months ago 1 comment
LynchzDEV
build(deps-dev): bump rubyzip from 3.1.0 to 3.1.1

abtion/rails-template #3083

3.1.0 → 3.1.1 Patch PR
Open 9 months ago
abtion
Bump rubyzip from 3.1.0 to 3.1.1

DEFRA/waste-carriers-back-office #2215

3.1.0 → 3.1.1 Patch PR
Open 9 months ago
DEFRA
Bump rubyzip from 3.1.0 to 3.1.1

crimethinc/website #4868

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
crimethinc
Bump rubyzip from 2.4.1 to 3.1.1

infrablocks/terraform-aws-admin #180

2.4.1 → 3.1.1 Major PR
Closed 9 months ago 1 comment
infrablocks
Bump the bundler group across 1 directory with 7 updates

cooljeanius/diaspora #491

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
cooljeanius
Bump rubyzip from 3.1.0 to 3.1.1

codeforamerica/efiler-api #78

3.1.0 → 3.1.1 Patch PR
Closed 9 months ago 1 comment
codeforamerica
Bump the gem-dependencies group with 11 updates

DFE-Digital/teaching-vacancies #8111

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
DFE-Digital
Bump rubyzip from 3.1.0 to 3.1.1

znz/memo-app-r #569

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
znz
build(deps): bump rubyzip from 2.4.1 to 3.1.1

ponny/GNAFData #13

2.4.1 → 3.1.1 Major PR
Open 9 months ago
ponny
Update rubyzip requirement from ~> 2.4 to >= 2.4, < 4.0

typisttech/swagger_ui_standalone #34

~> 2.4 → >= 2.4, < 4.0
Open 9 months ago
typisttech
Bump rubyzip from 2.3.2 to 3.1.1

sangheraio/canine #24

2.3.2 → 3.1.1 Major PR
Closed 9 months ago 1 comment
sangheraio
Bump rubyzip from 2.4.1 to 3.1.1

karthikishorejs/qrdatofhir #32

2.4.1 → 3.1.1 Major PR
Open 9 months ago
karthikishorejs
Bump rubyzip from 3.1.0 to 3.1.1

datagouv/voie_rapide #113

3.1.0 → 3.1.1 Patch PR
Open 9 months ago
datagouv
Bump rubyzip from 2.4.1 to 3.1.1

infrablocks/terraform-aws-client-vpn #176

2.4.1 → 3.1.1 Major PR
Open 9 months ago
infrablocks
Bump the semver_updates group with 22 updates

botandrosedesign/rw24 #151

3.1.0 → 3.1.1 Patch PR
Open 9 months ago
botandrosedesign
Bump rubyzip from 2.4.1 to 3.1.1

infrablocks/terraform-aws-bastion #168

2.4.1 → 3.1.1 Major PR
Closed 9 months ago 1 comment
infrablocks
Build(deps): Bump rubyzip from 3.1.0 to 3.1.1

mysociety/alaveteli #8899

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
mysociety
Bump rubyzip from 2.4.1 to 3.1.1

NeatNerdPrime/openproject #2860

2.4.1 → 3.1.1 Major PR
Closed 9 months ago 1 comment
NeatNerdPrime
Bump rubyzip from 3.1.0 to 3.1.1

aim2bpg/rubree #121

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
aim2bpg
Bump the ruby-development-dependencies group with 3 updates

texpert/florsan #2775

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
texpert
Bump the ruby-development-dependencies group with 3 updates

texpert/rails_6_rss_reader #5200

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
texpert
Bump rubyzip from 2.4.1 to 3.1.1

infrablocks/rake_dependencies #191

2.4.1 → 3.1.1 Major PR
Open 9 months ago
infrablocks
Bump rubyzip from 3.1.0 to 3.1.1

openHPI/proformaxml #494

3.1.0 → 3.1.1 Patch PR
Open 9 months ago
openHPI
chore(deps): bump rubyzip from 3.1.0 to 3.1.1

jeremedia/shock-collar-portraits-2025 #18

3.1.0 → 3.1.1 Patch PR
Closed 9 months ago 1 comment
jeremedia
chore(deps): bump rubyzip from 3.1.0 to 3.1.1

stoicfist/UEK-M223-Multiuser #10

3.1.0 → 3.1.1 Patch PR
Closed 9 months ago 1 comment
stoicfist
Bump rubyzip from 2.4.1 to 3.1.1

sseguku/crowdax-api #32

2.4.1 → 3.1.1 Major PR
Closed 9 months ago 1 comment
sseguku
Bump rubyzip from 2.3.2 to 3.1.1

maffamatgmaildotcom/ecomm #58

2.3.2 → 3.1.1 Major PR
Closed 9 months ago 1 comment
maffamatgmaildotcom
Bump rubyzip from 2.4.1 to 3.1.1

m-porun/SleepLogger #184

2.4.1 → 3.1.1 Major PR
Open 9 months ago
m-porun
:arrow_up: Bump rubyzip from 3.1.0 to 3.1.1

pglombardo/PasswordPusher #3723

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
pglombardo
Bump rubyzip from 2.4.1 to 3.1.1

rdunlop/unicycling-registration #2831

2.4.1 → 3.1.1 Major PR
Open 9 months ago
rdunlop
Bump rubyzip from 2.4.1 to 3.1.1

infrablocks/terraform-aws-dns-zones #177

2.4.1 → 3.1.1 Major PR
Open 9 months ago
infrablocks
Bump rubyzip from 3.1.0 to 3.1.1

alphagov/locations-api #715

3.1.0 → 3.1.1 Patch PR
Open 9 months ago
alphagov
Bump rubyzip from 2.4.1 to 3.1.1

mdismail-cse/wp-secure-scan-AI #29

2.4.1 → 3.1.1 Major PR
Open 9 months ago
mdismail-cse
Bump rubyzip from 2.4.1 to 3.1.1

minori-tuchimoti/CoffeeShop #36

2.4.1 → 3.1.1 Major PR
Open 9 months ago
minori-tuchimoti
Bump rubyzip from 3.1.0 to 3.1.1

rhannequin/astronoby #215

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
rhannequin
Package Details
Name: rubyzip
Ecosystem: rubygems
PURL Type: gem
Package URL: pkg:gem/rubyzip
JSON API: View JSON
Security Advisories

3

Active advisories
CRITICAL 2
MODERATE 1
View All gem Advisories
Package Information
Description:

rubyzip is a ruby module for reading and writing zip files

Repository: https://github.com/rubyzip/rubyzip
Homepage: http://github.com/rubyzip/rubyzip
Latest Release: 2.4.1
over 1 year ago
Dependent Repos: 671,154
Dependent Packages: 1,245
Downloads: 604,871,948
Ranking: Top 0.0212% by dependent repos Top 0.0279% by downloads Top 0.0418% by dependent pkgs
PR Status
Open 281 (41.2%)
Merged 112 (16.4%)
Closed 277 (40.6%)
PR Types
Major 364 (53.4%)
Minor 143 (21.0%)
Patch 128 (18.8%)