VULNERABILITY INTELLIGENCE

CVE-2019-13589

CVSS score9.8 CRITICAL

EPSS probability4.35%

CISA KEVNot currently listed

Published2019-07-14

Last modified2026-06-17

Description

The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.1.5.