Vulnerability on dependency CVE-2018-1000544

[gauravjantwal]

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000544

[bettysteger]

@gauravjantwal have you solved this issue?

[gauravjantwal]

Hey @bettysteger , this is an old repository, avoid using this repo

[bettysteger]

@gauravjantwal can i ask what you use instead? thanks!

[gauravjantwal]

I fixed this issue by just updating the dependency ..

https://github.com/pennfoster/scorm

Since then I am not working on Ruby :D

@bettysteger