{"action":"No fix published. Pin and monitor.","affected":[],"component":"paranoid2","cve_ids":["CVE-2019-13589"],"ecosystem":"RubyGems","epss":0.0435,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4g4c-8gqh-m4vm","id":"tcs_01M5KEGM665J1F3GAQJWFGFSVH","modified_at":"2026-03-13T22:11:53.350253Z","published_at":"2019-07-16T00:41:55Z","references":["https://osv.dev/vulnerability/GHSA-4g4c-8gqh-m4vm","https://nvd.nist.gov/vuln/detail/CVE-2019-13589","https://github.com/rubygems/rubygems.org/issues/2051","https://github.com/anjlab/paranoid2","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/paranoid2/CVE-2019-13589.yml","https://rubygems.org/gems/paranoid2/versions","https://snyk.io/vuln/SNYK-RUBY-PARANOID2-451600","http://www.securityfocus.com/bid/109281"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4g4c-8gqh-m4vm","url":"https://osv.dev/vulnerability/GHSA-4g4c-8gqh-m4vm"}],"summary":"paranoid2 gem Code backdoor"}