Skip to main content
VulnerabilityPublished Updated

logstash_codec-cloudfront (RubyGems) · Malicious Code

Affects logstash_codec-cloudfrontSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 23:59 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemslogstash_codec-cloudfrontpkg:gem/logstash_codec-cloudfrontOther threatsAffected
  • =3.0.3
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using logstash_codec-cloudfront version 3.0.3 and remove or replace it with a trusted alternative. Monitor vendor advisories and the OpenSSF repository for updates or official fixes.

Description

The RubyGems package logstash_codec-cloudfront version 3.0.3 contains malicious code. This package is identified as a malicious package by the OpenSSF project and is flagged in the GCVE database. No CVSS score or detailed technical exploit information is provided. There is no indication of known exploits in the wild or an available patch.

References

Community reviews

Loading reviews…