VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

ansible-tower_client (RubyGems) · Malicious Code

Affects ansible-tower_clientSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 19 Jul 2026, 01:06 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsansible-tower_client`pkg:gem/ansible-tower_client`Other threats	Affected =0.21.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Remove or replace this version with a trusted alternative or a version verified to be clean. Monitor official sources for updates or advisories regarding remediation.

Description

The ansible-tower_client RubyGem version 0.21.0 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally harmful package distributed via RubyGems. No CVSS score or detailed technical exploit information is provided.

Impact

Use of the affected version (=0.21.0) of ansible-tower_client may lead to execution of malicious code embedded within the package. This can compromise the security of systems that install or run this package. No known exploits in the wild have been reported at this time.

Summary

The ansible-tower_client RubyGem version 0.21.0 has been flagged as containing malicious code by the OpenSSF malicious-packages project. This indicates that the package itself is harmful and may execute unauthorized or malicious actions when used. There is no detailed vulnerability or exploit information available, nor is there a vendor advisory or patch information. The threat is classified as a malicious package rather than a traditional vulnerability.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 19 Jul 2026, 01:06 UTC

Technical details

References

Community reviews