8000 Directory traversal vulnerability in rubyzip · Issue #42 · Shopify/hosted-payment-sim · GitHub
[go: up one dir, main page]
Skip to content
This repository was archived by the owner on Apr 28, 2021. It is now read-only.
This repository was archived by the owner on Apr 28, 2021. It is now read-only.
Directory traversal vulnerability in rubyzip #42
Closed
Closed
Directory traversal vulnerability in rubyzip#42
@shopify-services

Description

@shopify-services
shopify-services
opened on Jul 26, 2017

@pi3r your change in fc02209 introduced a vulnerability, because the package rubyzip at its current version 1.2.0 is vulnerable to 2017-5946.
Please update to >= 1.2.1.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions
      0