CVE-2026-82455

CVE-2026-82455

published August 29, 2026

CVSS
7.1
EPSS
0%
Percentile
4.0
In the wild
Unconfirmed
What it is

Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior during gem extraction is not a security vulnerability, so no vulnerability exists for this record to describe.

The record
Technical detail
CVSS
7.1 · NONE
CVSS v4.0
6.9 · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00144 · 4.0th percentile
Published
2026-08-29T18:16Z
EPSS history
Timeline
  • 30 AUG 16:19Z
    EPSS moved — → 0%
    epss
  • 29 AUG 13:47Z
    RubyGems before 4.0.13 Path Traversal via Symlink Resolution
    cvelistv5