logstash-codec-bulk-es (RubyGems) · Malicious Code
Affects logstash-codec-bulk-esSource GCVE Database
Rated by Threat Radar
Data as of 19 Jul 2026, 00:00 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
RubyGemslogstash-codec-bulk-espkg:gem/logstash-codec-bulk-esOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
The recommended action is to avoid or remove the affected version (=0.1.4) of the logstash-codec-bulk-es package. Users should verify the integrity of their dependencies and source packages to prevent installation of this malicious version.
Description
The RubyGems package logstash-codec-bulk-es version 0.1.4 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package rather than a traditional vulnerability with a patch. No CVSS score or detailed technical exploitation information is provided.