VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

dradis_nmap (RubyGems) · Malicious Code

Affects dradis_nmapSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:39 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsdradis_nmap`pkg:gem/dradis_nmap`Other threats	Affected =3.15.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using dradis_nmap version 3.15.0. Monitor official RubyGems and vendor advisories for updates or replacement versions.

Description

The RubyGem package dradis_nmap version 3.15.0 has been identified as containing malicious code. This is a supply chain threat where the package itself is compromised to potentially harm users who install or use it. There is no CVSS score available for this issue. No official patch or remediation guidance has been provided in the available data.

Impact

Users who install or use dradis_nmap version 3.15.0 may be exposed to malicious code execution, which could lead to compromise of their systems or data. Since this is a malicious package, the impact depends on the payload embedded in the package, which is not detailed here. No known exploits in the wild have been reported.

Summary

The dradis_nmap RubyGem version 3.15.0 is flagged as a malicious package by the OpenSSF and listed in the GHSA-malware database under MAL-2024-6872. This indicates that the package contains intentionally harmful code rather than a traditional vulnerability. The threat is specific to this exact version of the package. No further technical details or exploitation methods are provided in the source data.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 19 Jul 2026, 00:39 UTC

Technical details

References

Community reviews