Skip to main content
VulnerabilityPublished Updated

activemodel_validators (RubyGems) · Malicious Code

Affects activemodel_validatorsSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsactivemodel_validatorspkg:gem/activemodel_validatorsOther threatsAffected
  • =3.0.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using 'activemodel_validators' version 3.0.0 and remove it from their dependency trees. It is recommended to verify the integrity and provenance of RubyGems packages before use. Monitor the vendor or repository for any official advisories or fixed versions.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (0d9f24d8e763b86a352d4436455f876f55aca00e7a350041f773374493e6c735) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/activemodel_validators/MAL-2024-6466.json))

References

Community reviews

Loading reviews…