RubyGems/paranoid2 CVE-2019-13589: critical 9.8, EPSS 4.35%
paranoid2 gem Code backdoor
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-4g4c-8gqh-m4vm
- https://nvd.nist.gov/vuln/detail/CVE-2019-13589
- https://github.com/rubygems/rubygems.org/issues/2051
- https://github.com/anjlab/paranoid2
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/paranoid2/CVE-2019-13589.yml
- https://rubygems.org/gems/paranoid2/versions
- https://snyk.io/vuln/SNYK-RUBY-PARANOID2-451600
- http://www.securityfocus.com/bid/109281
CVE-2019-13589 · published · modified · JSON