CVE-2019-14281
1 advisory.
RubyGems/datagrid CVE-2019-14281: critical 9.8, EPSS 3.12%
datagrid contains code Injection backdoor
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rqp5-pg7w-832p
- https://nvd.nist.gov/vuln/detail/CVE-2019-14281
- https://github.com/rubygems/rubygems.org/issues/2072
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/datagrid/CVE-2019-14281.yml
- https://rubygems.org/gems/datagrid/versions
CVE-2019-14281 · published · modified · JSON