halostatue/minitar

halostatue/minitar

Releases11
Frequency10 months 1 week
Last Release
Stars44
Minimal pure-ruby support for POSIX tar(1) archives.

CVE History

CVEPublishedCVSS v3CVSS v2
5 MEDIUM

Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.