Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

rubyzip

Ecosystem:
rubygems
Package URL:
pkg:gem/rubyzip
Total PRs:
682 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
235 repositories
Unique Repos (30 days):
0 repositories
Security Advisories
Rubyzip gem contains a Directory Traversal vulnerability in zip file component
GHSA-vqcq-mrmw-mcmg CVE-2018-1000544 CRITICAL published almost 8 years ago • updated about 15 hours ago
rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrar...
Rubyzip denial of service
GHSA-5m2v-hc64-56h6 CVE-2019-16892 MODERATE published over 6 years ago • updated about 15 hours ago
In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofe...
Directory traversal vulnerability in RubyZip
GHSA-gcqq-w6gr-h9j9 CVE-2017-5946 CRITICAL published over 8 years ago • updated about 15 hours ago
The `Zip::File` component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip file...
Recent PRs (filtered by: Major PRs )
RSS Feed Clear filter
Bump the ruby-dependencies group with 29 updates

dpla/dashboard-analytics #306

2.3.2 → 3.2.2 Major PR
Open about 2 months ago 1 comment
dpla
Bump rubyzip from 2.4.1 to 3.2.2

kaishuu0123/rebacklogs #222

2.4.1 → 3.2.2 Major PR
Open 3 months ago 2 comments
kaishuu0123
Bump rubyzip from 2.4.1 to 3.2.2

ARTFROST1/SpecsVibeCode #10

2.4.1 → 3.2.2 Major PR
Open 5 months ago 1 comment
ARTFROST1
Bump rubyzip from 2.4.1 to 3.2.2

rjoken/speedpastes #27

2.4.1 → 3.2.2 Major PR
Closed 5 months ago 1 comment
rjoken
Bump rubyzip from 2.4.1 to 3.2.2

MHaggis/crx-scanner-api #9

2.4.1 → 3.2.2 Major PR
Closed 5 months ago 2 comments
MHaggis
chore(deps): bump the bundler group across 1 directory with 3 updates

Project-Fukakai/RankHub #65

1.1.7 → 2.4.1 Major PR
Closed 5 months ago 1 comment
Project-Fukakai
Bump rubyzip from 2.4.1 to 3.2.2

jackalxyz/beef #443

2.4.1 → 3.2.2 Major PR
Closed 6 months ago 3 comments
jackalxyz
Bump rubyzip from 2.4.1 to 3.2.2

Kunal06khurana/Personal_Finance_Advisor #8

2.4.1 → 3.2.2 Major PR
Closed 7 months ago 1 comment
Kunal06khurana
build(deps): bump rubyzip from 2.4.1 to 3.2.1

amnis-invictus/ikt.edu.vn.ua #724

2.4.1 → 3.2.1 Major PR
Open 8 months ago 9 comments
amnis-invictus
Bump rubyzip from 2.4.1 to 3.2.1

rdunlop/unicycling-registration #2872

2.4.1 → 3.2.1 Major PR
Closed 8 months ago 1 comment
rdunlop
Bump rubyzip from 2.4.1 to 3.2.1

CruGlobal/mobile-content-api #1886

2.4.1 → 3.2.1 Major PR
Closed 8 months ago 1 comment
CruGlobal
Bump rubyzip from 2.4.1 to 3.2.1

Debashan-Bargenix/discourse-forum #132

2.4.1 → 3.2.1 Major PR
Open 8 months ago 1 comment
Debashan-Bargenix
Build(deps): Bump rubyzip from 2.4.1 to 3.2.1

xfalcox/discourse #347

2.4.1 → 3.2.1 Major PR
Open 8 months ago 1 comment
xfalcox
Build(deps): Bump rubyzip from 2.4.1 to 3.2.1

discourse/discourse #35607

2.4.1 → 3.2.1 Major PR
Open 8 months ago 2 comments
discourse
Bump rubyzip from 2.4.1 to 3.2.0

infrablocks/terraform-aws-application-load-balancer #187

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
infrablocks
Bump rubyzip from 2.4.1 to 3.2.0

infrablocks/terraform-aws-cross-account-role #180

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
infrablocks
build(deps): bump rubyzip from 2.4.1 to 3.2.0

ekaraage/or4cle2 #129

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
ekaraage
Bump rubyzip from 2.4.1 to 3.2.0

NeatNerdPrime/openproject #2903

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
NeatNerdPrime
Bump rubyzip from 2.3.2 to 3.2.0

intuition-box/mock-api #78

2.3.2 → 3.2.0 Major PR
Closed 8 months ago 1 comment
intuition-box
Bump rubyzip from 2.4.1 to 3.2.0

infrablocks/terraform-aws-admin #182

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
infrablocks
build(deps): Bump rubyzip from 2.4.1 to 3.2.0

Architecht25/ren0vate #42

2.4.1 → 3.2.0 Major PR
Open 8 months ago
Architecht25
Bump rubyzip from 2.4.1 to 3.2.0

infrablocks/terraform-aws-api-gateway-v2 #175

2.4.1 → 3.2.0 Major PR
Open 8 months ago
infrablocks
build(deps): bump rubyzip from 2.4.1 to 3.2.0

ponny/GNAFData #16

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
ponny
Bump rubyzip from 2.4.1 to 3.2.0

carlows/squirrel #29

2.4.1 → 3.2.0 Major PR
Open 8 months ago
carlows
Bump rubyzip from 2.4.1 to 3.2.0

infrablocks/terraform-aws-client-vpn #177

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
infrablocks
Bump rubyzip from 2.4.1 to 3.2.0

infrablocks/terraform-mongodbatlas-aws-private-endpoint #159

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
infrablocks
Bump rubyzip from 2.4.1 to 3.2.0

infrablocks/terraform-aws-bastion #169

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
infrablocks
Bump rubyzip from 2.4.1 to 3.2.0

m-porun/SleepLogger #187

2.4.1 → 3.2.0 Major PR
Open 8 months ago
m-porun
Bump rubyzip from 2.3.2 to 3.2.0

maffamatgmaildotcom/ecomm #62

2.3.2 → 3.2.0 Major PR
Open 8 months ago
maffamatgmaildotcom
Bump rubyzip from 2.4.1 to 3.2.0

rdunlop/unicycling-registration #2850

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
rdunlop
chore(deps): bump rubyzip from 2.4.1 to 3.2.0

jeremedia/enliterator #108

2.4.1 → 3.2.0 Major PR
Open 8 months ago
jeremedia
Bump rubyzip from 2.4.1 to 3.2.0

CruGlobal/mobile-content-api #1877

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
CruGlobal
Bump rubyzip from 2.4.1 to 3.2.0

mdismail-cse/wp-secure-scan-AI #32

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
mdismail-cse
Bump rubyzip from 2.4.1 to 3.2.0

ssteo/beef #431

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
ssteo
Bump rubyzip from 2.4.1 to 3.2.0

infrablocks/terraform-mongodbatlas-project #148

2.4.1 → 3.2.0 Major PR
Open 8 months ago
infrablocks
chore(deps): Bump rubyzip from 2.4.1 to 3.2.0

jeremedia/ok-offline-api #52

2.4.1 → 3.2.0 Major PR
Open 8 months ago
jeremedia
Bump rubyzip from 2.4.1 to 3.2.0

gbingham18/SpotifyWrappedLifetimeDashboard #21

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
gbingham18
Bump rubyzip from 2.4.1 to 3.2.0

AnkitNandwana/file_upload_system #22

2.4.1 → 3.2.0 Major PR
Open 8 months ago
AnkitNandwana
Bump rubyzip from 2.4.1 to 3.2.0

jonathanStrange0/discourse #119

2.4.1 → 3.2.0 Major PR
Open 8 months ago 2 comments
jonathanStrange0
Build(deps): Bump rubyzip from 2.4.1 to 3.2.0

fenlly/discourse #575

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
fenlly
Build(deps): Bump rubyzip from 2.4.1 to 3.2.0

xfalcox/discourse #328

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 2 comments
xfalcox
Build(deps): Bump rubyzip from 2.4.1 to 3.2.0

discourse/discourse #35394

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 2 comments
discourse
Bump rubyzip from 2.4.1 to 3.2.0

soitun/openproject #1477

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
soitun
Bump rubyzip from 2.4.1 to 3.2.0

infrablocks/terraform-aws-access-control #211

2.4.1 → 3.2.0 Major PR
Closed 8 months ago 1 comment
infrablocks
Bump the ruby-dependencies group across 1 directory with 10 updates

yuki0920/company-ranking #865

2.4.1 → 3.1.1 Major PR
Open 9 months ago
yuki0920
chore(deps): bump rubyzip from 2.3.2 to 3.1.1

betagouv/collectif-objets #1489

2.3.2 → 3.1.1 Major PR
Open 9 months ago
betagouv
Bump rubyzip from 2.4.1 to 3.1.1

zelusototmayor/imagescrapingtool #12

2.4.1 → 3.1.1 Major PR
Open 9 months ago
zelusototmayor
Bump rubyzip from 2.4.1 to 3.1.1

infrablocks/terraform-aws-account-defaults #182

2.4.1 → 3.1.1 Major PR
Open 9 months ago
infrablocks
Bump rubyzip from 2.4.1 to 3.1.1

infrablocks/terraform-aws-api-gateway-lambda-integration #191

2.4.1 → 3.1.1 Major PR
Open 9 months ago
infrablocks
Bump rubyzip from 2.4.1 to 3.1.1

DFE-Digital/npq-registration #2917

2.4.1 → 3.1.1 Major PR
Closed 9 months ago 1 comment
DFE-Digital
Package Details
Name: rubyzip
Ecosystem: rubygems
PURL Type: gem
Package URL: pkg:gem/rubyzip
JSON API: View JSON
Security Advisories

3

Active advisories
CRITICAL 2
MODERATE 1
View All gem Advisories
Package Information
Description:

rubyzip is a ruby module for reading and writing zip files

Repository: https://github.com/rubyzip/rubyzip
Homepage: http://github.com/rubyzip/rubyzip
Latest Release: 2.4.1
over 1 year ago
Dependent Repos: 671,154
Dependent Packages: 1,245
Downloads: 604,871,948
Ranking: Top 0.0212% by dependent repos Top 0.0279% by downloads Top 0.0418% by dependent pkgs
PR Status
Open 281 (41.2%)
Merged 112 (16.4%)
Closed 277 (40.6%)
PR Types
Major 364 (53.4%)
Minor 143 (21.0%)
Patch 128 (18.8%)