Skip to main content
VulnerabilityPublished Updated

acts-as_keywordable (RubyGems) · Malicious Code

Affects acts-as_keywordableSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsacts-as_keywordablepkg:gem/acts-as_keywordableOther threatsAffected
  • =0.0.9
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using acts-as_keywordable version 0.0.9 and remove it from their environments if present. Monitor vendor or repository advisories for updates or official fixes. Since this is not a cloud service, remediation depends on user action.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (d7f988bda08bbbfda52a620b80cf17e080c8b1a2590289d3ad47558078fb2de8) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/acts-as_keywordable/MAL-2024-6494.json))

References

Community reviews

Loading reviews…