Skip to main content
VulnerabilityPublished Updated

aliyun-open_search (RubyGems) · Malicious Code

Affects aliyun-open_searchSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 01:10 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsaliyun-open_searchpkg:gem/aliyun-open_searchOther threatsAffected
  • =0.6.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'aliyun-open_search' RubyGem version 0.6.0. Check for alternative trusted packages or later versions if available. Monitor official advisories for updates or remediation guidance.

Description

The RubyGem package 'aliyun-open_search' version 0.6.0 contains malicious code as identified by the OpenSSF malicious packages database. This package is flagged as a malicious package rather than a traditional vulnerability. No CVSS score or detailed technical exploit information is provided.

References

Community reviews

Loading reviews…