CVE-2019-13354
CVE-2019-13354 concerns the Ruby gem strong_password ; the 0.0.7 release on RubyGems.org was hijacked to include a backdoor enabling remote code execution. The malicious package allowed code execution if exploited, with fixes deployed in 0.0.8 (per multiple sources). Public references consistentl...