RubyGems/mixlib-archive CVE-2017-1000026: high 7.5, EPSS 1.90%
mixlib-archive Path Traversal vulnerability
Action: Upgrade mixlib-archive to 0.4.0 or later.
bundle update mixlib-archiveAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: GHSA-98wx-cw86-c97x
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000026
- https://github.com/chef/mixlib-archive/pull/6
- https://github.com/chef/mixlib-archive
- https://github.com/chef/mixlib-archive/blob/master/CHANGELOG.md
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/mixlib-archive/CVE-2017-1000026.yml
CVE-2017-1000026 · published · modified · JSON