CVE-2016-10173: Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby all...

Security readout for executives and security teams

A vulnerable Ruby TAR extraction library can let a malicious archive write files outside the intended folder. The business risk is highest for services, build systems, or automation that process TAR files from users or untrusted sources. Exposure is likely limited to Ruby applications, developer tooling, CI jobs, or operational workflows that use the vulnerable gems to extract attacker-controlled TAR archives. Treat as a targeted remediation item, escalating if any internet-facing or partner-facing workflow extracts TAR uploads. No active exploitation evidence is provided, but arbitrary file write can become serious in sensitive environments. Mitigation focus: Upgrade minitar to version 0.6 or later where applicable.; Remove or replace archive-tar-minitar 0.5.2 where present.; Do not extract untrusted TAR archives with vulnerable gem versions..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.