RubyGems/rest-client CVE-2019-15224: critical 9.8, EPSS 3.55%
rest-client Gem Contains Malicious Code
Action: Upgrade rest-client to 1.7.0 or later.
bundle update rest-clientAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.10 | 1.7.0 | - |
Fixed versions
| 1.7.0 |
Sources
- osv: GHSA-333g-rpr4-7hxq
- https://nvd.nist.gov/vuln/detail/CVE-2019-15224
- https://github.com/rest-client/rest-client/issues/713
- https://github.com/rubygems/rubygems.org/issues/2097
- https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blockchain_wallet/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/coin_base/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doge-coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lita_coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth_amazon/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2019-15224.yml
CVE-2019-15224 · published · modified · JSON