Safeguard
Tag

strong-password-gem-rce

Safeguard articles tagged "strong-password-gem-rce" — guides, analysis, and best practices for software supply chain and application security.

1 article

Software Supply Chain Security

RubyGems strong_password malicious version RCE

In 2019, attackers hijacked the strong_password RubyGems account and shipped a backdoored v0.0.7 that let them eval() code in production Rails apps.

Jul 2, 20267 min read
strong-password-gem-rce — Safeguard Blog