VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

blacklight-advanced_search (RubyGems) · Malicious Code

Affects blacklight-advanced_searchSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:48 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsblacklight-advanced_search`pkg:gem/blacklight-advanced_search`Other threats	Affected =7.0.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fixed version or official guidance is available, avoid using blacklight-advanced_search version 7.0.0 and consider removing it from your environment if present.

Description

The RubyGems package blacklight-advanced_search version 7.0.0 contains malicious code. This issue was identified by the OpenSSF and is cataloged under MAL-2024-6783. There is no CVSS score or detailed technical exploit information available. No patch or remediation guidance has been provided yet.

Impact

Use of the affected version 7.0.0 of blacklight-advanced_search may result in execution of malicious code embedded in the package. This could compromise the security of systems that install or run this package. No known active exploits have been reported at this time.

Summary

The blacklight-advanced_search RubyGems package version 7.0.0 has been found to contain malicious code as reported by the OpenSSF and recorded in the MAL-2024-6783 advisory. This is a supply chain threat involving a malicious package in the RubyGems ecosystem. No further technical details or exploitation methods are described in the source data.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 19 Jul 2026, 00:48 UTC

Technical details

References

Community reviews