VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

airbrake_graylog2 (RubyGems) · Malicious Code

Affects airbrake_graylog2Source GCVE Database

Severity

High

Rated by Threat Radar

Data as of 18 Jul 2026, 19:25 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsairbrake_graylog2`pkg:gem/airbrake_graylog2`Other threats	Affected =0.0.4	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'airbrake_graylog2' RubyGems package version 0.0.4. Monitor official RubyGems sources and the OpenSSF malicious packages repository for updates or removal notices.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: ghsa-malware (af6b1263b0adf942222cada6bff3315bdbbdfb48f62ce4d8af3fb7609c4e3feb) --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/9fbb5fba02ba2f02395d3d2d43c31b2c482b7a9d/osv/malicious/rubygems/airbrake_graylog2/MAL-2024-6538.json))

Impact

Use of the malicious 'airbrake_graylog2' package version 0.0.4 can lead to compromise of systems or data depending on the malicious payload embedded in the package. The exact impact is not detailed in the source data, but supply chain malware typically risks unauthorized code execution or data exfiltration.

Summary

The 'airbrake_graylog2' RubyGems package version 0.0.4 has been flagged as containing malicious code by the OpenSSF malicious packages repository. This indicates that the package is a malicious supply chain artifact rather than a traditional vulnerability. There is no detailed technical description or exploitation method provided in the source data.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 18 Jul 2026, 19:13 UTC

Technical details

References

Community reviews