Skip to main content
VulnerabilityPublished Updated

array-xml-serialization (RubyGems) · Malicious Code

Affects array-xml-serializationSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:58 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsarray-xml-serializationpkg:gem/array-xml-serializationOther threatsAffected
  • =0.1.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using the affected version (=0.1.0) of 'array-xml-serialization'. Remove or replace this package with a trusted alternative. Monitor vendor or repository advisories for updates or official fixes.

Description

The RubyGem package 'array-xml-serialization' version 0.1.0 contains malicious code. This package has been identified as a malicious package by the OpenSSF project and is flagged in the GitHub Security Advisory database. No official patch or remediation guidance is currently provided.

References

Community reviews

Loading reviews…