Chocolatey Chocolatey Ruby — known CVE vulnerabilities

Every CVE whose affected-product data names Chocolatey Chocolatey Ruby, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2022-45301 — CVSS 4.3 (medium): Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the Authenticated Users group write privileges for…