VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

dradis_brakeman (RubyGems) · Malicious Code

Affects dradis_brakemanSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:39 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsdradis_brakeman`pkg:gem/dradis_brakeman`Other threats	Affected =3.15.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid installing or using dradis_brakeman version 3.15.0. Verify package integrity and source before installation. Monitor vendor or repository advisories for updates or fixed versions.

Description

The RubyGem package dradis_brakeman version 3.15.0 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where the package itself is compromised. No CVSS score or detailed technical exploitation information is provided.

Impact

Users who install or use dradis_brakeman version 3.15.0 may be exposed to malicious code execution or other harmful effects inherent to the compromised package. The exact impact is not detailed, but supply chain compromises can lead to unauthorized code execution, data compromise, or system integrity loss.

Summary

The dradis_brakeman RubyGem version 3.15.0 has been flagged as containing malicious code by the OpenSSF malicious packages initiative. This indicates that the package is a supply chain risk, potentially distributing harmful code to users who install this specific version. There is no detailed vulnerability or exploit information beyond the classification as a malicious package.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 19 Jul 2026, 00:39 UTC

Technical details

References

Community reviews