VulnerabilityPublished 25 Jun 2024Updated 18 Jul 2026

fluent_plugin-statsd (RubyGems) · Malicious Code

Affects fluent_plugin-statsdSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:08 UTC

What to do

Affected software

Product	Affected	Fixed in
RubyGemsfluent_plugin-statsd`pkg:gem/fluent_plugin-statsd`Other threats	Affected =1.0.3	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using fluent_plugin-statsd version 1.0.3 and instead use a different version or alternative package. Monitor vendor or repository advisories for updates or official fixes. Since this is a malicious package, removal and replacement is recommended.

Description

The RubyGems package fluent_plugin-statsd version 1.0.3 has been identified as containing malicious code. This is a supply chain threat where the package itself is compromised. No CVSS score is available for this issue.

Impact

Use of the compromised fluent_plugin-statsd version 1.0.3 package could lead to execution of malicious code within environments that install or run this package. The exact impact is not detailed, but supply chain compromises typically risk data integrity, confidentiality, and system stability.

Summary

The fluent_plugin-statsd RubyGems package version 1.0.3 is flagged as malicious by the OpenSSF malicious packages database. This indicates that the package contains harmful code that could compromise systems using it. There is no detailed technical description or exploit information provided, and no known exploits in the wild have been reported. The threat is specific to the exact version 1.0.3 of this package.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 19 Jul 2026, 00:08 UTC

Technical details

References

Community reviews