Skip to main content
VulnerabilityPublished Updated

znowflake_client (RubyGems) · Malicious Code

Affects znowflake_clientSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 18 Jul 2026, 21:00 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsznowflake_clientpkg:gem/znowflake_clientOther threatsAffected
  • =1.1.1
  • =1.1.2
  • =1.1.3
  • =1.1.4
  • =1.1.5
  • =1.1.6
  • =1.1.7
  • =1.1.8
  • =1.1.9
  • =2.0.0
  • =2.1.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until an official fix or removal is confirmed, users should avoid using the affected versions and consider removing or replacing the package. Monitor official sources for updates regarding remediation.

Description

The znowflake_client RubyGems package versions 1.1.1 through 1.1.9, and 2.0.0 through 2.1.0 contain malicious code. This is identified as a malicious package rather than a traditional vulnerability. There is no CVSS score or detailed impact analysis available. No official patch or remediation guidance is provided at this time.

References

Community reviews

Loading reviews…