Approved changes feed: RSS · Atom

cpe:2.3:a:anjlab:paranoid2:1.1.6:*:*:*:*:ruby:*:*

part: a version: 1.1.6 update: *

VendorAnjlab (6f558d00-ca59-52d3-b42f-35585a9cbf03)
ProductParanoid2 (2e6510c4-8858-5fbb-b024-2be54f85f753)
Edition*
Language*
Software edition*
Target softwareruby
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gem/paranoid2 purl2cpe 2026-06-01 10:16:14.880255
pkg:github/anjlab/paranoid2 purl2cpe 2026-06-01 10:16:14.880257

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-13589 vulnerable 2026-06-08 05:12:52.171148 Details available
The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.1.5.
Published: 2019-07-14T15:03:37.000Z
Updated: 2024-08-04T23:57:39.426Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.