Debian/rubygems: unknown
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction roo
Action: Upgrade rubygems to 4.0.15-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.15-2 | - |
Fixed versions
| 4.0.15-2 |
Sources
- osv: DEBIAN-CVE-2026-82455#Debian:14/rubygems
- https://security-tracker.debian.org/tracker/CVE-2026-82455
published · modified · JSON