The act-as_enumerable RubyGems package version 0.1.3 has been identified as containing malicious code, as reported by the OpenSSF malicious packages database and tracked under MAL-2024-6370. This is a case of a malicious package in the RubyGems ecosystem rather than a traditional vulnerability. There is no detailed technical information or CVSS score available, and no known exploits in the wild have been reported.

Use of the act-as_enumerable package version 0.1.3 may result in execution of malicious code, potentially compromising systems that install or run this package. The exact impact is not detailed, but malicious packages typically pose risks such as data theft, system compromise, or unauthorized actions.

Avoid using the act-as_enumerable package version 0.1.3. Since no patch or fixed version is indicated, users should remove this version from their dependencies and replace it with a trusted alternative or a version verified to be clean. Monitor official RubyGems advisories and the OpenSSF database for updates or remediation guidance.