Skip to main content
VulnerabilityPublished Updated

cucumber_json_schema (RubyGems) · Malicious Code

Affects cucumber_json_schemaSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:11 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemscucumber_json_schemaAffected
  • =90002.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using the 'cucumber_json_schema' package version 90002.0. Remove or replace this package with a trusted alternative. Monitor vendor advisories or the OpenSSF repository for updates or further guidance.

Description

The RubyGems package 'cucumber_json_schema' version 90002.0 has been identified as malicious by the OpenSSF Package Analysis project. The package is considered malicious because it communicates with a domain associated with malicious activity. There is no CVSS score or detailed technical vulnerability description available. No official patch or remediation guidance is provided. The package is not a cloud service, and no known exploits in the wild have been reported.

References

Community reviews

Loading reviews…