CVSS 3.0
9.8 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2019-13589
Critical (9.8) in anjlab paranoid2. EPSS 4.3% chance of exploitation in the next 30 days.
The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.1.5.
Severity
- EPSS
- 4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-829
- Published
- Modified
- Record from
- the NVD, synced
Affected
- anjlab:paranoid2
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-4g4c-8gqh-m4vm | RubyGems | paranoid2 | 1.1.6 | no fix published |