Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

rubyzip

Ecosystem:
rubygems
Package URL:
pkg:gem/rubyzip
Total PRs:
682 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
235 repositories
Unique Repos (30 days):
0 repositories
Security Advisories
Rubyzip gem contains a Directory Traversal vulnerability in zip file component
GHSA-vqcq-mrmw-mcmg CVE-2018-1000544 CRITICAL published almost 8 years ago • updated about 15 hours ago
rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrar...
Rubyzip denial of service
GHSA-5m2v-hc64-56h6 CVE-2019-16892 MODERATE published over 6 years ago • updated about 15 hours ago
In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofe...
Directory traversal vulnerability in RubyZip
GHSA-gcqq-w6gr-h9j9 CVE-2017-5946 CRITICAL published over 8 years ago • updated about 15 hours ago
The `Zip::File` component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip file...
Recent PRs (filtered by: Merged , Patch PRs )
RSS Feed Clear filter
Bump rubyzip from 3.1.0 to 3.1.1

design-history/design-history #1009

3.1.0 → 3.1.1 Patch PR
Merged 8 months ago
design-history
build(deps): bump the bundler group with 14 updates

ministryofjustice/laa-apply-for-legal-aid #8064

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago 1 comment
ministryofjustice
Bump the ruby-deps group with 2 updates

gocd/ruby-functional-tests #1296

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
gocd
chore(deps-dev): bump rubyzip from 3.1.0 to 3.1.1

mishina2228/medical-expenses-manager #1977

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
mishina2228
chore(deps-dev): bump rubyzip from 3.1.0 to 3.1.1

mishina2228/oanda-api-rails #2245

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
mishina2228
chore(deps-dev): bump rubyzip from 3.1.0 to 3.1.1

mishina2228/youtube-api-trial #2614

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
mishina2228
Bump rubyzip from 3.1.0 to 3.1.1

kddnewton/exreg #51

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
kddnewton
Bump rubyzip from 3.1.0 to 3.1.1

czhu12/canine #350

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
czhu12
Build(deps-dev): Bump rubyzip from 3.1.0 to 3.1.1

abtion/abtion-secret #2571

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
abtion
Bump rubyzip from 3.1.0 to 3.1.1

beefproject/beef #3407

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
beefproject
Bump rubyzip from 3.1.0 to 3.1.1

crimethinc/website #4868

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
crimethinc
Bump the bundler group across 1 directory with 7 updates

cooljeanius/diaspora #491

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
cooljeanius
Bump the gem-dependencies group with 11 updates

DFE-Digital/teaching-vacancies #8111

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
DFE-Digital
Bump rubyzip from 3.1.0 to 3.1.1

znz/memo-app-r #569

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
znz
Build(deps): Bump rubyzip from 3.1.0 to 3.1.1

mysociety/alaveteli #8899

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
mysociety
Bump rubyzip from 3.1.0 to 3.1.1

aim2bpg/rubree #121

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
aim2bpg
Bump the ruby-development-dependencies group with 3 updates

texpert/florsan #2775

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
texpert
Bump the ruby-development-dependencies group with 3 updates

texpert/rails_6_rss_reader #5200

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
texpert
:arrow_up: Bump rubyzip from 3.1.0 to 3.1.1

pglombardo/PasswordPusher #3723

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
pglombardo
Bump rubyzip from 3.1.0 to 3.1.1

rhannequin/astronoby #215

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
rhannequin
Bump rubyzip from 3.1.0 to 3.1.1

errbit/errbit #2261

3.1.0 → 3.1.1 Patch PR
Merged 9 months ago
errbit
Bump the gem-dependencies group across 1 directory with 8 updates

DFE-Digital/teaching-vacancies #8016

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
DFE-Digital
Bump the ruby group with 3 updates

getgauge/gauge-ruby #418

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
getgauge
Bump rubyzip from 3.0.1 to 3.0.2

trade-tariff/trade-tariff-backend #2453

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
trade-tariff
Bump rubyzip from 3.0.1 to 3.0.2

starswan/qaop-elm #578

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
starswan
Bump the semver_updates group with 8 updates

botandrosedesign/rw24 #138

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
botandrosedesign
Bump the patch-and-minor-dependencies group with 2 updates

simonneutert/strava-export-organizer-web #48

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
simonneutert
chore(deps): bump rubyzip from 3.0.1 to 3.0.2

DFE-Digital/register-early-career-teachers-public #1214

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago 1 comment
DFE-Digital
Bump rubyzip from 3.0.1 to 3.0.2

kddnewton/exreg #49

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
kddnewton
Bump rubyzip from 3.0.1 to 3.0.2

openHPI/proformaxml #483

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
openHPI
Bump rubyzip from 3.0.1 to 3.0.2 in the ruby-development-dependencies group

texpert/florsan #2722

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
texpert
:arrow_up: Bump rubyzip from 3.0.1 to 3.0.2

pglombardo/PasswordPusher #3638

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
pglombardo
Bump rubyzip from 3.0.1 to 3.0.2

ledermann/pingcrm #3435

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
ledermann
Bump rubyzip from 3.0.1 to 3.0.2

ddbj/submission-mss #1145

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
ddbj
chore(deps): bump rubyzip from 3.0.1 to 3.0.2

cal-itp/calitp.org #487

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago 1 comment
cal-itp
Build(deps-dev): Bump rubyzip from 3.0.1 to 3.0.2

abtion/abtion-secret #2445

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
abtion
Bump rubyzip from 3.0.1 to 3.0.2

errbit/errbit #2175

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
errbit
Bump rubyzip from 3.0.1 to 3.0.2

o19s/quepid #1453

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
o19s
Bump rubyzip from 3.0.1 to 3.0.2

codeforamerica/asap_pdf #277

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
codeforamerica
Bump rubyzip from 3.0.1 to 3.0.2

crimethinc/website #4802

3.0.1 → 3.0.2 Patch PR
Merged 10 months ago
crimethinc
Bump rubyzip from 3.0.0 to 3.0.1

kddnewton/exreg #48

3.0.0 → 3.0.1 Patch PR
Merged 10 months ago
kddnewton
Bump the bundler group with 5 updates

cooljeanius/diaspora #475

3.0.0 → 3.0.1 Patch PR
Merged 10 months ago
cooljeanius
Bump rubyzip from 3.0.0 to 3.0.1

rhannequin/astronoby #202

3.0.0 → 3.0.1 Patch PR
Merged 10 months ago
rhannequin
Bump the ruby group with 3 updates

getgauge/gauge-ruby #416

3.0.0 → 3.0.1 Patch PR
Merged 10 months ago
getgauge
Bump rubyzip from 3.0.0 to 3.0.1

ddbj/submission-mss #1123

3.0.0 → 3.0.1 Patch PR
Merged 10 months ago
ddbj
Package Details
Name: rubyzip
Ecosystem: rubygems
PURL Type: gem
Package URL: pkg:gem/rubyzip
JSON API: View JSON
Security Advisories

3

Active advisories
CRITICAL 2
MODERATE 1
View All gem Advisories
Package Information
Description:

rubyzip is a ruby module for reading and writing zip files

Repository: https://github.com/rubyzip/rubyzip
Homepage: http://github.com/rubyzip/rubyzip
Latest Release: 2.4.1
over 1 year ago
Dependent Repos: 671,154
Dependent Packages: 1,245
Downloads: 604,871,948
Ranking: Top 0.0212% by dependent repos Top 0.0279% by downloads Top 0.0418% by dependent pkgs
PR Status
Open 281 (41.2%)
Merged 112 (16.4%)
Closed 277 (40.6%)
PR Types
Major 364 (53.4%)
Minor 143 (21.0%)
Patch 128 (18.8%)