Tzinfo vulnerabilities
We track 1 vulnerability in Tzinfo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 22, 2022.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Tzinfo vulnerabilities
- 8.1 High severity
tzinfo: Improper Limitation of a Pathname to a Restricted Directory
TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path