[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6QPSk5PUSCmD8VLmLfDUrd1L2tFeB8IhmAR6nuq2fgQ":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":41,"topProductsByCves":42,"seoMetadata":44,"meta":53},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":19},27546,"rubyzip_project",1,3,0,20,"2019-09-25","r",[16],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},139776,"rubyzip","Rubyzip_project is a technology vendor with 1 tracked product and 3 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[21,30,35],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":29},"CVE-2018-1000544","rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames \"..\u002F\" to write arbitrary files to the filesystem..","2018-06-26",9.8,"v3.1","Critical",false,0.04407,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":34},"CVE-2017-5946","The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses \"..\u002F\" pathname substrings to write arbitrary files to the filesystem.","2017-02-27",0.03441,{"cveId":36,"description":37,"publishedDate":13,"cvssScore":38,"cvssVersion":26,"severity":39,"isKev":28,"epssScore":40},"CVE-2019-16892","In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk consumption).",5.5,"Medium",0.01581,[],[43],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":45,"metaDescription":46,"keywords":47,"structuredData":48},"Rubyzip_project - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Rubyzip_project covering 1 product with 3 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Rubyzip_project vulnerabilities, Rubyzip_project security, Rubyzip_project CVE, Rubyzip_project threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":49,"@type":50,"name":51,"description":46,"url":52},"https:\u002F\u002Fschema.org","Organization","Rubyzip_project","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Frubyzip_project",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":54,"apiVersion":55},"2026-10-17T17:09:37.926Z","3.0"]