| Package | Affected versions | Patched versions |
|---|---|---|
| archive-tar-minitar | < 0.5.2 | 0.5.2 |
| minitar | < 0.6 | 0.6 |
| archive-tar-minitar | ≤ 0.5.2 | |
| minitar | ≤ 0.5.4 |
Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free