Skip to main content
VulnerabilityPublished Updated

apress_api (RubyGems) · Malicious Code

Affects apress_apiSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 01:01 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsapress_apipkg:gem/apress_apiOther threatsAffected
  • =1.24.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'apress_api' package version 1.24.0. Monitor official RubyGems and OpenSSF advisories for updates or safe versions.

Description

The RubyGems package 'apress_api' version 1.24.0 has been identified as containing malicious code. This is a case of a malicious package rather than a traditional vulnerability. No CVSS score or detailed technical exploit information is provided.

References

Community reviews

Loading reviews…