Skip to main content
VulnerabilityPublished Updated

taxjar-bundler (RubyGems) · Malicious Code

Affects taxjar-bundlerSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 22:35 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemstaxjar-bundlerpkg:gem/taxjar-bundlerOther threatsAffected
  • =23.55.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid using 'taxjar-bundler' version 23.55.0 and remove it from their environments if present. Monitor vendor or repository advisories for updates or official guidance.

Description

The RubyGems package 'taxjar-bundler' version 23.55.0 contains malicious code. This package has been identified as a malicious package by the OpenSSF project and is listed in their malicious packages database. No CVSS score or detailed technical exploit information is provided.

References

Community reviews

Loading reviews…