The rails_structured_logging RubyGems package includes malicious code in versions 0.0.4, 0.1.1, 0.1.2, and 0.2.1. This is identified as a high-severity vulnerability due to the malicious nature of the code embedded in these package versions. There is no CVSS score provided, and no known exploits in the wild have been reported. No patch or remediation information is available in the provided data.

Users who install or use the affected versions of rails_structured_logging may be exposed to malicious code execution, which can compromise system integrity, confidentiality, or availability depending on the payload of the malicious code. The exact impact depends on the nature of the malicious code but is considered high risk.

Patch status is not yet confirmed — check the vendor advisory or RubyGems repository for current remediation guidance. Until a fix or official advisory is available, users should avoid using the affected versions (0.0.4, 0.1.1, 0.1.2, 0.2.1) of rails_structured_logging and consider removing or replacing the package if already installed.