Safeguard
Tag

cve-2019-13354

Safeguard articles tagged "cve-2019-13354" — guides, analysis, and best practices for software supply chain and application security.

1 article

Software Supply Chain Security

RubyGems strong_password malicious version RCE

In 2019, attackers hijacked the strong_password RubyGems account and shipped a backdoored v0.0.7 that let them eval() code in production Rails apps.

Jul 2, 20267 min read
cve-2019-13354 — Safeguard Blog