Description
The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | datagrid | 1.0.6 | — | GHSA-rqp5-pg7w-832p |
Critical · 9.8
CVE-2019-14281
EUVD-2019-0605GHSA-rqp5-pg7w-832p
datagrid contains code Injection backdoor
Published Jul 26, 2019 · Updated Aug 5, 2024 · Assigned by mitre