← All advisories

Critical severity9.8NVD Advisory· Published Jul 26, 2019· Updated Jun 17, 2026

CVE-2019-14281

CVE-2019-14281

Description

The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Ruby/datagrid gemdescription
ghsa-coords
pkg:gem/datagrid
Datagrid Project/Datagrid
cpe:2.3:a:datagrid_project:datagrid:1.0.6:*:*:*:*:ruby:*:*

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-rqp5-pg7w-832pghsaADVISORY
github.com/rubygems/rubygems.org/issues/2072nvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2019-14281ghsaADVISORY
rubygems.org/gems/datagrid/versionsnvdThird Party AdvisoryWEB
github.com/rubysec/ruby-advisory-db/blob/master/gems/datagrid/CVE-2019-14281.ymlghsaWEB
snyk.io/vuln/SNYK-RUBY-DATAGRID-455500nvd

News mentions

0

No linked articles in our index yet.