Skip to main content
VulnerabilityPublished Updated

has-changelogs (RubyGems) · Malicious Code

Affects has-changelogsSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 00:05 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemshas-changelogspkg:gem/has-changelogsOther threatsAffected
  • =0.2.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until then, avoid using version 0.2.0 of 'has-changelogs'.

Description

The RubyGems package 'has-changelogs' version 0.2.0 contains malicious code as identified by the OpenSSF project. This is a case of a malicious package in the RubyGems ecosystem. No CVSS score or detailed technical exploitation information is provided.

References

Community reviews

Loading reviews…