Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

rubyzip

Ecosystem:
rubygems
Package URL:
pkg:gem/rubyzip
Total PRs:
682 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
235 repositories
Unique Repos (30 days):
0 repositories
Security Advisories
Rubyzip gem contains a Directory Traversal vulnerability in zip file component
GHSA-vqcq-mrmw-mcmg CVE-2018-1000544 CRITICAL published almost 8 years ago • updated about 15 hours ago
rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrar...
Rubyzip denial of service
GHSA-5m2v-hc64-56h6 CVE-2019-16892 MODERATE published over 6 years ago • updated about 15 hours ago
In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofe...
Directory traversal vulnerability in RubyZip
GHSA-gcqq-w6gr-h9j9 CVE-2017-5946 CRITICAL published over 8 years ago • updated about 15 hours ago
The `Zip::File` component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip file...
Recent PRs (filtered by: Closed , Patch PRs )
RSS Feed Clear filter
Bump the ruby-deps group across 4 directories with 38 updates

chadlwilson/jruby-rack #50

3.2.0 → 3.2.2 Patch PR
Closed 6 months ago 1 comment
chadlwilson
Bump the ruby-deps group across 4 directories with 34 updates

chadlwilson/jruby-rack #47

3.2.0 → 3.2.2 Patch PR
Closed 6 months ago 1 comment
chadlwilson
Bump rubyzip from 3.2.1 to 3.2.2

sunniesnow/sscharter #11

3.2.1 → 3.2.2 Patch PR
Closed 7 months ago 1 comment
sunniesnow
Bump the bundler group across 1 directory with 9 updates

CeeBeeUK/laughing-tyrion #60

3.2.1 → 3.2.2 Patch PR
Closed 7 months ago 1 comment
CeeBeeUK
chore(deps-dev): bump rubyzip from 3.2.0 to 3.2.1

mishina2228/youtube-api-trial #2658

3.2.0 → 3.2.1 Patch PR
Closed 8 months ago 1 comment
mishina2228
chore(deps-dev): bump rubyzip from 3.2.0 to 3.2.1

mishina2228/medical-expenses-manager #2010

3.2.0 → 3.2.1 Patch PR
Closed 8 months ago 1 comment
mishina2228
Bump the ruby-deps group across 4 directories with 4 updates

chadlwilson/jruby-rack #38

3.2.0 → 3.2.1 Patch PR
Closed 8 months ago 1 comment
chadlwilson
Bump rubyzip from 3.2.0 to 3.2.1

shawntz/clementime #47

3.2.0 → 3.2.1 Patch PR
Closed 8 months ago 1 comment
shawntz
chore(deps): bump rubyzip from 3.2.0 to 3.2.1

nico-or/turnoextra_app #74

3.2.0 → 3.2.1 Patch PR
Closed 8 months ago 1 comment
nico-or
Bump the ruby-deps group across 4 directories with 27 updates

jruby/jruby-rack #349

3.1.0 → 3.1.1 Patch PR
Closed 8 months ago
jruby
1.2.x: Bump the ruby-deps group across 4 directories with 27 updates

jruby/jruby-rack #348

3.1.0 → 3.1.1 Patch PR
Closed 8 months ago 1 comment
jruby
1.2.x: Bump the ruby-deps group across 4 directories with 30 updates

jruby/jruby-rack #347

3.1.0 → 3.1.1 Patch PR
Closed 8 months ago 5 comments
jruby
1.2.x: Bump the ruby-deps group across 4 directories with 29 updates

jruby/jruby-rack #346

3.1.0 → 3.1.1 Patch PR
Closed 8 months ago 1 comment
jruby
Bump rubyzip from 3.1.0 to 3.1.1

codeforamerica/efiler-api #78

3.1.0 → 3.1.1 Patch PR
Closed 9 months ago 1 comment
codeforamerica
chore(deps): bump rubyzip from 3.1.0 to 3.1.1

jeremedia/shock-collar-portraits-2025 #18

3.1.0 → 3.1.1 Patch PR
Closed 9 months ago 1 comment
jeremedia
chore(deps): bump rubyzip from 3.1.0 to 3.1.1

stoicfist/UEK-M223-Multiuser #10

3.1.0 → 3.1.1 Patch PR
Closed 9 months ago 1 comment
stoicfist
Bump rubyzip from 3.1.0 to 3.1.1

kp-forks/beef #324

3.1.0 → 3.1.1 Patch PR
Closed 9 months ago 1 comment
kp-forks
Bump rubyzip from 3.1.0 to 3.1.1

stevens101/nucore-open #736

3.1.0 → 3.1.1 Patch PR
Closed 9 months ago 1 comment
stevens101
Bump rubyzip from 3.1.0 to 3.1.1

DEFRA/flood-risk-back-office #1074

3.1.0 → 3.1.1 Patch PR
Closed 9 months ago 1 comment
DEFRA
build(deps): bump rubyzip from 3.1.0 to 3.1.1

codacy/codacy-rubocop #947

3.1.0 → 3.1.1 Patch PR
Closed 9 months ago 2 comments
codacy
Update rubyzip requirement from >= 3.0, < 3.1 to >= 3.0, < 3.2

skoji/gepub #157

>= 3.0, < 3.1 → >= 3.0, < 3.2 Patch PR
Closed 9 months ago 2 comments
skoji
Bump rubyzip from 3.0.1 to 3.0.2

xuanxu/cluster-plots #55

3.0.1 → 3.0.2 Patch PR
Closed 10 months ago 1 comment
xuanxu
Bump the gem-dependencies group with 6 updates

DFE-Digital/teaching-vacancies #8009

3.0.1 → 3.0.2 Patch PR
Closed 10 months ago 1 comment
DFE-Digital
Build(deps): Bump rubyzip from 3.0.1 to 3.0.2

mysociety/alaveteli #8844

3.0.1 → 3.0.2 Patch PR
Closed 10 months ago 1 comment
mysociety
Bump rubyzip from 3.0.1 to 3.0.2

lylo/pagecord #425

3.0.1 → 3.0.2 Patch PR
Closed 10 months ago 1 comment
lylo
Bump rubyzip from 3.0.0.rc2 to 3.0.1

wasafiri/vulcan #66

3.0.0.rc2 → 3.0.1 Patch PR
Closed 10 months ago 1 comment
wasafiri
Package Details
Name: rubyzip
Ecosystem: rubygems
PURL Type: gem
Package URL: pkg:gem/rubyzip
JSON API: View JSON
Security Advisories

3

Active advisories
CRITICAL 2
MODERATE 1
View All gem Advisories
Package Information
Description:

rubyzip is a ruby module for reading and writing zip files

Repository: https://github.com/rubyzip/rubyzip
Homepage: http://github.com/rubyzip/rubyzip
Latest Release: 2.4.1
over 1 year ago
Dependent Repos: 671,154
Dependent Packages: 1,245
Downloads: 604,871,948
Ranking: Top 0.0212% by dependent repos Top 0.0279% by downloads Top 0.0418% by dependent pkgs
PR Status
Open 281 (41.2%)
Merged 112 (16.4%)
Closed 277 (40.6%)
PR Types
Major 364 (53.4%)
Minor 143 (21.0%)
Patch 128 (18.8%)